Merge pull request openshift#390 from yuumasato/grant-metal-toolbox-w…

…orkflow-permissions Grant permissions required metal-toolbox workflow
rhmdnd · Aug 25, 2023 · cd3744f · cd3744f
2 parents 2f80e23 + 3b8560d
commit cd3744f
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/.github/workflows/release-latest.yml b/.github/workflows/release-latest.yml
@@ -7,6 +7,10 @@ on:
 jobs:
   # Push to latest
   operator-container-push-latest:
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
     uses: metal-toolbox/container-push/.github/workflows/container-push.yml@main
     with:
       name: compliance-operator
@@ -16,6 +20,10 @@ jobs:
       vendor: 'Compliance Operator Authors'
 
   bundle-container-push-latest:
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
     uses: metal-toolbox/container-push/.github/workflows/container-push.yml@main
     with:
       name: compliance-operator-bundle
@@ -25,6 +33,10 @@ jobs:
       vendor: 'Compliance Operator Authors'
 
   openscap-container-push-latest:
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
     uses: metal-toolbox/container-push/.github/workflows/container-push.yml@main
     with:
       name: openscap-ocp

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -7,6 +7,10 @@ on:
 
 jobs:
   container-main:
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
     uses: metal-toolbox/container-push/.github/workflows/container-push.yml@main
     with:
       name: compliance-operator
@@ -16,6 +20,10 @@ jobs:
       vendor: 'Compliance Operator Authors'
 
   bundle-container:
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
     uses: metal-toolbox/container-push/.github/workflows/container-push.yml@main
     with:
       name: compliance-operator-bundle