Skip to content

fix (cicd): Adding right permissions to pipelines #125

fix (cicd): Adding right permissions to pipelines

fix (cicd): Adding right permissions to pipelines #125

name: Deploy to dev
permissions: read-all
on:
workflow_dispatch:
pull_request:
branches:
- master
paths:
- '**.js*'
- '**.ts*'
- package*.json
- Dockerfile
- entrypoint.sh
- .github/workflows/cd-deploy-to-dev.yml
concurrency:
# Ensures that only one workflow task will run at a time. Previous builds, if
# already in process, will get cancelled. Only the latest commit will be allowed
# to run, cancelling any workflows in between
group: ${{ github.workflow }}-${{ github.job }}-${{ github.head_ref || github.run_id }}
cancel-in-progress: true
jobs:
build:

Check failure on line 26 in .github/workflows/cd-deploy-to-dev.yml

View workflow run for this annotation

GitHub Actions / Deploy to dev

Invalid workflow file

The workflow is not valid. .github/workflows/cd-deploy-to-dev.yml (Line: 26, Col: 3): Error calling workflow 'ogticrd/cuenta-unica-registry/.github/workflows/sub-build-push-image.yml@32c2ecb487a2b3a22a970fc2fb93bb5c9b76bb4c'. The nested job 'build' is requesting 'id-token: write', but is only allowed 'id-token: read'.
uses: ./.github/workflows/sub-build-push-image.yml
with:
environment: development
dockerfile_path: ./Dockerfile
dockerfile_target: runner
app_name: ${{ vars.APP_NAME }}
registry: ${{ vars.GOOGLE_ARTIFACT_REGISTRY }}
secrets: inherit
deploy:
needs: [build]
uses: ./.github/workflows/sub-cloudrun-deploy.yml
with:
environment: development
project_id: ${{ vars.GOOGLE_PROJECT_ID }}
region: ${{ vars.GOOGLE_CLOUD_REGION }}
app_name: ${{ vars.APP_NAME }}
image_digest: ${{ needs.build.outputs.image_digest }}
min_instances: '0'
max_instances: '5'
cpu: '1'
memory: 256Mi
secrets: inherit