@@ -32,6 +32,7 @@ jobs:
     # if: ${{ github.repository_owner == 'Acode-Foundation' && needs.build.result == 'success' }}
     permissions:
       contents: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v7
@@ -69,6 +70,7 @@ jobs:
           find /tmp/artifacts -type f -name "*.apk" | while read -r f; do
             # Produces: <apk>.sig and <apk>.pem
             cosign sign-blob --yes "$f" \
+              --oidc-provider=github-actions \
               --output-signature "${f}.sig" \
               --output-certificate "${f}.pem"
           done