From 7316e5ce4b9fa8a256342ed0926efc0ab039f593 Mon Sep 17 00:00:00 2001
From: itchyny <itchyny@cybozu.co.jp>
Date: Tue, 5 May 2026 14:06:45 +0900
Subject: [PATCH] Fix CI to add `artifact-metadata` permission for
 actions/attest (#3530)

---
 .github/workflows/ci.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9e5600b3..fa4f56de 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -298,6 +298,7 @@ jobs:
       id-token: write
       contents: read
       attestations: write
+      artifact-metadata: write
       packages: write
     needs: linux
     steps:
@@ -372,6 +373,7 @@ jobs:
       contents: write
       id-token: write
       attestations: write
+      artifact-metadata: write
       pull-requests: write
     environment: release
     needs: [linux, macos, windows, dist, docker]