fix: trust policies for PR (#488)

* fix: trust policies for PR * fix: fmt issues
dvsa · Nov 29, 2024 · e064bdf · e064bdf
1 parent 8bb2ab1
commit e064bdf
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/infra/terraform/accounts/nonprod/main.tf b/infra/terraform/accounts/nonprod/main.tf
@@ -30,8 +30,9 @@ module "account" {
 
   github_oidc_subjects = concat(
     [
-      "dvsa/vol-app:ref:refs/heads/main",         # `.github/workflows/docker.yaml` & `.github/workflows/assets.yaml`.
-      "dvsa/vol-app:environment:account-nonprod", # `.github/workflows/deploy-account.yaml`.
+      "dvsa/vol-app:ref:refs/heads/main", # `.github/workflows/docker.yaml` & `.github/workflows/assets.yaml`.
+      "dvsa/vol-app:environment:account-nonprod",
+      "dvsa/vol-app:pull_request", # `.github/workflows/deploy-account.yaml`.
     ],
     [
       for env in local.environments : "dvsa/vol-app:environment:${env}" # `.github/workflows/deploy-environment.yaml`

diff --git a/infra/terraform/accounts/prod/main.tf b/infra/terraform/accounts/prod/main.tf
@@ -30,8 +30,9 @@ module "account" {
 
   github_oidc_subjects = concat(
     [
-      "dvsa/vol-app:ref:refs/heads/main",      # `.github/workflows/docker.yaml` & `.github/workflows/assets.yaml`.
-      "dvsa/vol-app:environment:account-prod", # `.github/workflows/deploy-account.yaml`.
+      "dvsa/vol-app:ref:refs/heads/main", # `.github/workflows/docker.yaml` & `.github/workflows/assets.yaml`.
+      "dvsa/vol-app:environment:account-prod",
+      "dvsa/vol-app:pull_request", # `.github/workflows/deploy-account.yaml`.
     ],
     [
       for env in local.environments : "dvsa/vol-app:environment:${env}" # `.github/workflows/deploy-environment.yaml`