Update go-ossf-slsa3-publish.yml

.github/workflows/go-ossf-slsa3-publish.yml

@@ -1,29 +1,16 @@
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
-
-# This workflow lets you compile your Go project using a SLSA3 compliant builder.
-# This workflow will generate a so-called "provenance" file describing the steps
-# that were performed to generate the final binary.
-# The project is an initiative of the OpenSSF (openssf.org) and is developed at
-# https://github.com/slsa-framework/slsa-github-generator.
-# The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier.
-# For more information about SLSA and how it improves the supply-chain, visit slsa.dev.
-
 name: SLSA Go releaser
+
 on:
   workflow_dispatch:
   release:
     types: [created]
 
-permissions: read-all
+permissions:
+  id-token: write
+  contents: write
+  actions: read
 
 jobs:
-  # ========================================================================================================================================
-  #   Prerequesite: Create a .slsa-goreleaser.yml in the root directory of your project.
-  #    See format in https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/go/README.md#configuration-file
-  #=========================================================================================================================================
   build:
     permissions:
       id-token: write # To sign.
@@ -32,9 +19,7 @@ jobs:
     uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.4.0
     with:
       go-version: 1.19
-      # =============================================================================================================
-      #   Optional: For more options, see https://github.com/slsa-framework/slsa-github-generator#golang-projects
-      # =============================================================================================================
+      output: ./dist
 
   publish:
     needs: build