IntenseWebs/mattermost
3
0
Fork 0
mirror of https://github.com/mattermost/mattermost.git synced 2026-08-27 05:37:15 -05:00
Code Issues Packages Projects Releases Wiki Activity

setup permissions for chainguard-dev/setup-chainctl (#33676)

Browse Source 
Setting `id-token: write` allows the workflow to request and use a JSON Web Token (JWT) from GitHub's OIDC provider. This JWT can then be exchanged with an external service -- in this case, ChainGuard -- to obtain short-lived credentials for authenticating and performing actions on that service.
This commit is contained in:
Jesse Hallam
2025-08-13 20:17:37 +00:00
committed by GitHub
parent 42c53ef464
commit a5f3cc786e
2 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build-server-image.yml
+5
View File
@@ -12,6 +12,11 @@ on:
env:
CHAINCTL_IDENTITY: ee399b4c72dd4e58e3d617f78fc47b74733c9557/922f2d48307d6f5f
# Permissions required for chainguard-dev/setup-chainctl
permissions:
id-token: write
contents: read
jobs:
build-image:
runs-on: ubuntu-22.04
.github/workflows/dispatch-server-builder-image.yml
+5
View File
@@ -14,6 +14,11 @@ on:
env:
CHAINCTL_IDENTITY: ee399b4c72dd4e58e3d617f78fc47b74733c9557/922f2d48307d6f5f
# Permissions required for chainguard-dev/setup-chainctl
permissions:
id-token: write
contents: read
jobs:
build-and-push:
runs-on: ubuntu-latest