@@ -53,10 +53,13 @@ jobs:
5353 - env-setup
5454 name : Build and push run-env-base docker image
5555 uses : ./.github/workflows/deploy-single-docker-image.yml
56+ permissions :
57+ contents : read
58+ packages : write
5659 secrets :
57- GITHUB_REPOSITORY_PAT : ${{ secrets.SA_GITHUB_PAT }}
58- DOCKER_REGISTRY_USERNAME : ${{ secrets.SA_GITHUB_USERNAME }}
59- DOCKER_REGISTRY_PAT : ${{ secrets.SA_GITHUB_PAT }}
60+ GITHUB_REPOSITORY_PAT : ${{ secrets.GITHUB_TOKEN }}
61+ DOCKER_REGISTRY_USERNAME : ${{ github.actor }}
62+ DOCKER_REGISTRY_PAT : ${{ secrets.GITHUB_TOKEN }}
6063 with :
6164 force_rebuild : ${{ needs.env-setup.outputs.force_rebuild == 'true' }}
6265 image_name : ${{ needs.env-setup.outputs.repository_name }}/run-env-base
@@ -74,10 +77,13 @@ jobs:
7477 - run-env-base
7578 name : Build and push build-env-base docker image
7679 uses : ./.github/workflows/deploy-single-docker-image.yml
80+ permissions :
81+ contents : read
82+ packages : write
7783 secrets :
78- GITHUB_REPOSITORY_PAT : ${{ secrets.SA_GITHUB_PAT }}
79- DOCKER_REGISTRY_USERNAME : ${{ secrets.SA_GITHUB_USERNAME }}
80- DOCKER_REGISTRY_PAT : ${{ secrets.SA_GITHUB_PAT }}
84+ GITHUB_REPOSITORY_PAT : ${{ secrets.GITHUB_TOKEN }}
85+ DOCKER_REGISTRY_USERNAME : ${{ github.actor }}
86+ DOCKER_REGISTRY_PAT : ${{ secrets.GITHUB_TOKEN }}
8187 with :
8288 force_rebuild : ${{ needs.env-setup.outputs.force_rebuild == 'true' || needs.run-env-base.outputs.rebuild == 'true' }}
8389 image_name : ${{ needs.env-setup.outputs.repository_name }}/build-env-base
@@ -98,10 +104,13 @@ jobs:
98104 - build-env-base
99105 name : Build and push dev-env-base docker image
100106 uses : ./.github/workflows/deploy-single-docker-image.yml
107+ permissions :
108+ contents : read
109+ packages : write
101110 secrets :
102- GITHUB_REPOSITORY_PAT : ${{ secrets.SA_GITHUB_PAT }}
103- DOCKER_REGISTRY_USERNAME : ${{ secrets.SA_GITHUB_USERNAME }}
104- DOCKER_REGISTRY_PAT : ${{ secrets.SA_GITHUB_PAT }}
111+ GITHUB_REPOSITORY_PAT : ${{ secrets.GITHUB_TOKEN }}
112+ DOCKER_REGISTRY_USERNAME : ${{ github.actor }}
113+ DOCKER_REGISTRY_PAT : ${{ secrets.GITHUB_TOKEN }}
105114 with :
106115 force_rebuild : ${{ needs.env-setup.outputs.force_rebuild == 'true' || needs.build-env-base.outputs.rebuild == 'true' }}
107116 image_name : ${{ needs.env-setup.outputs.repository_name }}/dev-env-base
@@ -121,10 +130,13 @@ jobs:
121130 - build-env-base
122131 name : Build and push build-kit docker image
123132 uses : ./.github/workflows/deploy-single-docker-image.yml
133+ permissions :
134+ contents : read
135+ packages : write
124136 secrets :
125- GITHUB_REPOSITORY_PAT : ${{ secrets.SA_GITHUB_PAT }}
126- DOCKER_REGISTRY_USERNAME : ${{ secrets.SA_GITHUB_USERNAME }}
127- DOCKER_REGISTRY_PAT : ${{ secrets.SA_GITHUB_PAT }}
137+ GITHUB_REPOSITORY_PAT : ${{ secrets.GITHUB_TOKEN }}
138+ DOCKER_REGISTRY_USERNAME : ${{ github.actor }}
139+ DOCKER_REGISTRY_PAT : ${{ secrets.GITHUB_TOKEN }}
128140 with :
129141 force_rebuild : ${{ needs.env-setup.outputs.force_rebuild == 'true' || needs.build-env-base.outputs.rebuild == 'true' }}
130142 image_name : ${{ needs.env-setup.outputs.repository_name }}/build-kit-base
@@ -145,10 +157,13 @@ jobs:
145157 - env-setup
146158 name : Build and push deprecated everest-clang-format docker image
147159 uses : ./.github/workflows/deploy-single-docker-image.yml
160+ permissions :
161+ contents : read
162+ packages : write
148163 secrets :
149- GITHUB_REPOSITORY_PAT : ${{ secrets.SA_GITHUB_PAT }}
150- DOCKER_REGISTRY_USERNAME : ${{ secrets.SA_GITHUB_USERNAME }}
151- DOCKER_REGISTRY_PAT : ${{ secrets.SA_GITHUB_PAT }}
164+ GITHUB_REPOSITORY_PAT : ${{ secrets.GITHUB_TOKEN }}
165+ DOCKER_REGISTRY_USERNAME : ${{ github.actor }}
166+ DOCKER_REGISTRY_PAT : ${{ secrets.GITHUB_TOKEN }}
152167 with :
153168 force_rebuild : ${{ needs.env-setup.outputs.force_rebuild == 'true' }}
154169 image_name : everest-clang-format
@@ -166,10 +181,13 @@ jobs:
166181 - env-setup
167182 name : Build and push deprecated build-kit-alpine docker image
168183 uses : ./.github/workflows/deploy-single-docker-image.yml
184+ permissions :
185+ contents : read
186+ packages : write
169187 secrets :
170- GITHUB_REPOSITORY_PAT : ${{ secrets.SA_GITHUB_PAT }}
171- DOCKER_REGISTRY_USERNAME : ${{ secrets.SA_GITHUB_USERNAME }}
172- DOCKER_REGISTRY_PAT : ${{ secrets.SA_GITHUB_PAT }}
188+ GITHUB_REPOSITORY_PAT : ${{ secrets.GITHUB_TOKEN }}
189+ DOCKER_REGISTRY_USERNAME : ${{ github.actor }}
190+ DOCKER_REGISTRY_PAT : ${{ secrets.GITHUB_TOKEN }}
173191 with :
174192 force_rebuild : ${{ needs.env-setup.outputs.force_rebuild == 'true' }}
175193 image_name : build-kit-alpine
@@ -188,10 +206,13 @@ jobs:
188206 - env-setup
189207 name : Build and push deprecated build-kit-debian docker image
190208 uses : ./.github/workflows/deploy-single-docker-image.yml
209+ permissions :
210+ contents : read
211+ packages : write
191212 secrets :
192- GITHUB_REPOSITORY_PAT : ${{ secrets.SA_GITHUB_PAT }}
193- DOCKER_REGISTRY_USERNAME : ${{ secrets.SA_GITHUB_USERNAME }}
194- DOCKER_REGISTRY_PAT : ${{ secrets.SA_GITHUB_PAT }}
213+ GITHUB_REPOSITORY_PAT : ${{ secrets.GITHUB_TOKEN }}
214+ DOCKER_REGISTRY_USERNAME : ${{ github.actor }}
215+ DOCKER_REGISTRY_PAT : ${{ secrets.GITHUB_TOKEN }}
195216 with :
196217 force_rebuild : ${{ needs.env-setup.outputs.force_rebuild == 'true' }}
197218 image_name : build-kit-debian
0 commit comments