Add necessary permissions for accessing hashicorp vault to `update-ma…

…in.yml` and `update-main-source.yml` (#1007)
rancher · Apr 15, 2024 · 296b9ee · 296b9ee
1 parent 0610108
commit 296b9ee
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/.github/workflows/update-main-source.yml b/.github/workflows/update-main-source.yml
@@ -1,4 +1,4 @@
-name: Auto-update charts
+name: Auto-update charts on main-source branch
 
 on:
   workflow_dispatch: {}
@@ -7,6 +7,8 @@ on:
 
 jobs:
   update:
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4

diff --git a/.github/workflows/update-main.yml b/.github/workflows/update-main.yml
@@ -1,13 +1,15 @@
 name: Update main branch from main-source
 
 on:
-  workflow_dispatch:
+  workflow_dispatch: {}
   push:
     branches:
       - main-source
 
 jobs:
   update:
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4