Skip to content

Commit 8d9efc6

Browse files
committed
add id-token: write
Signed-off-by: Steve Taylor <steve@deployhub.com>
1 parent c73e3f4 commit 8d9efc6

File tree

1 file changed

+16
-16
lines changed

1 file changed

+16
-16
lines changed

.github/workflows/build-push-chart.yml

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,20 +1,16 @@
1-
---
21
name: Build/Push Image and Release Charts
3-
4-
on:
2+
"on":
53
pull_request:
64
paths-ignore:
7-
- "chart/**/Chart.yaml"
8-
- "chart/**/values.yaml"
5+
- chart/**/Chart.yaml
6+
- chart/**/values.yaml
97
push:
108
branches:
119
- main
1210
paths-ignore:
13-
- "chart/**/Chart.yaml"
14-
- "chart/**/values.yaml"
15-
11+
- chart/**/Chart.yaml
12+
- chart/**/values.yaml
1613
permissions: read-all
17-
1814
jobs:
1915
setenv:
2016
uses: ortelius/workflow-toolkit/.github/workflows/env-config-workflow.yml@c4e9eac57962580d434abd3fee4b46520596ee56
@@ -25,7 +21,6 @@ jobs:
2521
gh_sha: ${{ github.sha }}
2622
gh_repo: ${{ github.repository }}
2723
gh_run_number: ${{ github.run_number }}
28-
2924
release:
3025
uses: ortelius/workflow-toolkit/.github/workflows/container-release-workflow.yml@c4e9eac57962580d434abd3fee4b46520596ee56
3126
needs: setenv
@@ -38,24 +33,28 @@ jobs:
3833
secrets:
3934
QUAY_USERID: ${{ secrets.QUAY_USERID }}
4035
QUAY_PASSWORD: ${{ secrets.QUAY_PASSWORD }}
41-
36+
permissions:
37+
id-token: write
4238
trivy:
4339
permissions:
4440
security-events: write
4541
statuses: write
4642
uses: ortelius/workflow-toolkit/.github/workflows/trivy-scan-workflow.yml@c4e9eac57962580d434abd3fee4b46520596ee56
47-
needs: [setenv, release]
43+
needs:
44+
- setenv
45+
- release
4846
with:
4947
gh_repository_owner: ${{ github.repository_owner }}
5048
gh_event_name: ${{ github.event_name }}
5149
gh_ref: ${{ github.ref }}
5250
image_repo_tag: ${{ needs.setenv.outputs.image_repo_tag }}
53-
5451
helm:
5552
permissions:
5653
contents: write
5754
uses: ortelius/workflow-toolkit/.github/workflows/helm-release-workflow.yml@c4e9eac57962580d434abd3fee4b46520596ee56
58-
needs: [setenv, release]
55+
needs:
56+
- setenv
57+
- release
5958
with:
6059
gh_repository_owner: ${{ github.repository_owner }}
6160
gh_event_name: ${{ github.event_name }}
@@ -71,10 +70,11 @@ jobs:
7170
GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
7271
GPG_KEY: ${{ secrets.GPG_KEY }}
7372
gh_token: ${{ secrets.HELM_INDEXER_TOKEN }}
74-
7573
sbom:
7674
uses: ortelius/workflow-toolkit/.github/workflows/sbom-generation-workflow.yml@c4e9eac57962580d434abd3fee4b46520596ee56
77-
needs: [setenv, release]
75+
needs:
76+
- setenv
77+
- release
7878
with:
7979
gh_repository_owner: ${{ github.repository_owner }}
8080
gh_event_name: ${{ github.event_name }}

0 commit comments

Comments
 (0)