From 96b99b3ade286a9dc1ad800f224426caab2e1cba Mon Sep 17 00:00:00 2001
From: zamaz <71521611+zachariahmiller@users.noreply.github.com>
Date: Tue, 8 Oct 2024 13:39:11 -0400
Subject: [PATCH 1/2] fix publish conditional

---
 tasks.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/tasks.yaml b/tasks.yaml
index 5832e23b..68b11cd4 100644
--- a/tasks.yaml
+++ b/tasks.yaml
@@ -78,7 +78,9 @@ tasks:
     actions:
       - task: actions:determine-arch
       - task: publish:build-package
+      - task: setup:k3d-test-cluster
+        if: ${{ or (ne .variables.FLAVOR "upstream") (ne .variables.ARCH "arm64") }}
       - task: create-deploy-test-bundle
-        if: ${{ and (ne .variables.FLAVOR "upstream") (ne .variables.ARCH "arm64") }}
+        if: ${{ or (ne .variables.FLAVOR "upstream") (ne .variables.ARCH "arm64") }}
       - task: publish:publish-package
       - task: publish:publish-plugin-package

From b115dd99680f7c4758454a5c34a4601eecc19880 Mon Sep 17 00:00:00 2001
From: zamaz <71521611+zachariahmiller@users.noreply.github.com>
Date: Tue, 8 Oct 2024 13:47:30 -0400
Subject: [PATCH 2/2] fix scorecard permissions

---
 .github/workflows/scorecard.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
index a177f87f..fd722716 100644
--- a/.github/workflows/scorecard.yaml
+++ b/.github/workflows/scorecard.yaml
@@ -13,6 +13,18 @@ permissions: read-all
 jobs:
   validate:
     permissions:
+      actions: read
+      attestations: read
+      checks: read
+      contents: read
+      deployments: read
+      discussions: read
+      issues: read
+      packages: read
+      pages: read
+      pull-requests: read
+      repository-projects: read
+      statuses: read
       # Needed to upload the results to code-scanning dashboard.
       security-events: write
       # Used to receive a badge.