s

Author: brendan-kellam

.github/workflows/_gcp-deploy.yml

@@ -14,9 +14,6 @@ jobs:
     environment: ${{ inputs.environment }}
     permissions:
       contents: 'read'
-      # Requird for OIDC auth with GCP.
-      # @see: https://docs.github.com/en/actions/security-for-github-actions/security-hardening-your-deployments/about-security-hardening-with-openid-connect#adding-permissions-settings
-      id-token: 'write'
     env:
       IMAGE_PATH: us-west1-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/sourcebot/sourcebot-${{ vars.NEXT_PUBLIC_SOURCEBOT_CLOUD_ENVIRONMENT }}
     steps:

.github/workflows/scratch-workflow.yml

@@ -8,5 +8,9 @@ on:
 jobs:
   scratch:
     uses: ./.github/workflows/_gcp-deploy.yml
+    permissions:
+      # Requird for OIDC auth with GCP.
+      # @see: https://docs.github.com/en/actions/security-for-github-actions/security-hardening-your-deployments/about-security-hardening-with-openid-connect#adding-permissions-settings
+      id-token: 'write'
     with:
       environment: staging