diff --git a/infra/terraform/accounts/nonprod/main.tf b/infra/terraform/accounts/nonprod/main.tf index 49fa96b258..05387809bb 100644 --- a/infra/terraform/accounts/nonprod/main.tf +++ b/infra/terraform/accounts/nonprod/main.tf @@ -30,8 +30,9 @@ module "account" { github_oidc_subjects = concat( [ - "dvsa/vol-app:ref:refs/heads/main", # `.github/workflows/docker.yaml` & `.github/workflows/assets.yaml`. - "dvsa/vol-app:environment:account-nonprod", # `.github/workflows/deploy-account.yaml`. + "dvsa/vol-app:ref:refs/heads/main", # `.github/workflows/docker.yaml` & `.github/workflows/assets.yaml`. + "dvsa/vol-app:environment:account-nonprod", + "dvsa/vol-app:pull_request", # `.github/workflows/deploy-account.yaml`. ], [ for env in local.environments : "dvsa/vol-app:environment:${env}" # `.github/workflows/deploy-environment.yaml` diff --git a/infra/terraform/accounts/prod/main.tf b/infra/terraform/accounts/prod/main.tf index a1a91bf79b..bc00b29227 100644 --- a/infra/terraform/accounts/prod/main.tf +++ b/infra/terraform/accounts/prod/main.tf @@ -30,8 +30,9 @@ module "account" { github_oidc_subjects = concat( [ - "dvsa/vol-app:ref:refs/heads/main", # `.github/workflows/docker.yaml` & `.github/workflows/assets.yaml`. - "dvsa/vol-app:environment:account-prod", # `.github/workflows/deploy-account.yaml`. + "dvsa/vol-app:ref:refs/heads/main", # `.github/workflows/docker.yaml` & `.github/workflows/assets.yaml`. + "dvsa/vol-app:environment:account-prod", + "dvsa/vol-app:pull_request", # `.github/workflows/deploy-account.yaml`. ], [ for env in local.environments : "dvsa/vol-app:environment:${env}" # `.github/workflows/deploy-environment.yaml`