Skip to content

add permissions

add permissions #15

Workflow file for this run

name: release
on:
release:
types: [released]
push:
jobs:
# Promote and Deploy to prod-test
promote-prod-test-api:

Check failure on line 10 in .github/workflows/release.yml

View workflow run for this annotation

GitHub Actions / release

Invalid workflow file

The workflow is not valid. .github/workflows/release.yml (Line: 10, Col: 3): Error calling workflow 'CMSgov/ab2d/.github/workflows/promote.yml@86e312090d3b5c335d7b56bf5db97815344754b9'. The nested job 'promote' is requesting 'id-token: write', but is only allowed 'id-token: none'.
uses: ./.github/workflows/promote.yml
with:
environment: prod-test
module: api
secrets: inherit
promote-prod-test-worker:
uses: ./.github/workflows/promote.yml
with:
environment: prod-test
module: worker
secrets: inherit
deploy-prod-test-api:
needs: promote-prod-test-api
permissions:
contents: read
id-token: write
uses: ./.github/workflows/deploy.yml
with:
environment: prod-test
module: api
secrets: inherit
# deploy-prod-test-worker:
# needs: promote-prod-test-worker
# uses: ./.github/workflows/deploy.yml
# with:
# environment: prod-test
# module: worker
# secrets: inherit
# Promote and Deploy to prod
# promote-prod-api:
# uses: ./.github/workflows/promote.yml
# with:
# environment: prod
# module: api
# secrets: inherit
# promote-prod-worker:
# uses: ./.github/workflows/promote.yml
# with:
# environment: prod
# module: worker
# secrets: inherit
# deploy-prod-api:
# needs: promote-prod-api
# uses: ./.github/workflows/deploy.yml
# with:
# environment: prod
# module: api
# secrets: inherit
# deploy-prod-worker:
# needs: promote-prod-worker
# uses: ./.github/workflows/deploy.yml
# with:
# environment: prod
# module: worker
# secrets: inherit
# Promote and Deploy to sandbox
promote-sbx-api:
uses: ./.github/workflows/promote.yml
with:
environment: sbx
module: api
secrets: inherit
promote-sbx-worker:
uses: ./.github/workflows/promote.yml
with:
environment: sbx
module: worker
secrets: inherit
deploy-sbx-api:
needs: promote-sbx-api
uses: ./.github/workflows/deploy.yml
permissions:
contents: read
id-token: write
with:
environment: sbx
module: api
secrets: inherit
deploy-sbx-worker:
needs: promote-sbx-worker
uses: ./.github/workflows/deploy.yml
permissions:
contents: read
id-token: write
with:
environment: sbx
module: worker
secrets: inherit