diff --git a/.github/workflows/dev_workflow.yaml b/.github/workflows/dev_workflow.yaml index 1920ac9..932c737 100644 --- a/.github/workflows/dev_workflow.yaml +++ b/.github/workflows/dev_workflow.yaml @@ -6,6 +6,9 @@ on: types: - closed workflow_dispatch: +permissions: + id-token: write + contents: read jobs: Build: @@ -29,9 +32,12 @@ jobs: name: Development runs-on: ubuntu-latest steps: + - name: Login to Azure + uses: azure/login@v2.0.0 + with: + creds: ${{secrets.TDEI_CORE_AZURE_CREDS}} - name: Deploy to Dev uses: azure/webapps-deploy@v2 with: app-name: ${{ secrets.AZURE_WEBAPP_NAME }} - publish-profile: ${{ secrets.AZURE_WEBAPP_PUBLISH_PROFILE }} images: ${{ secrets.REGISTRY_DOMAIN }}/${{ secrets.REGISTRY_REPO }}:${{ github.sha }} diff --git a/.github/workflows/stage_workflow.yaml b/.github/workflows/stage_workflow.yaml index 3261833..f607c11 100644 --- a/.github/workflows/stage_workflow.yaml +++ b/.github/workflows/stage_workflow.yaml @@ -6,6 +6,9 @@ on: types: - closed workflow_dispatch: +permissions: + id-token: write + contents: read jobs: Build: @@ -29,9 +32,12 @@ jobs: name: Stage runs-on: ubuntu-latest steps: + - name: Login to Azure + uses: azure/login@v2.0.0 + with: + creds: ${{secrets.TDEI_CORE_AZURE_CREDS}} - name: Deploy to Stage uses: azure/webapps-deploy@v2 with: app-name: ${{ secrets.AZURE_WEBAPP_NAME }} - publish-profile: ${{ secrets.AZURE_WEBAPP_PUBLISH_PROFILE }} images: ${{ secrets.REGISTRY_DOMAIN }}/${{ secrets.REGISTRY_REPO }}:${{ github.sha }}.