chore(ci): added permissions to master CI.

Signed-off-by: Federico Di Pierro <[email protected]>
falcosecurity · May 17, 2023 · cbaad0c · cbaad0c
1 parent 251882b
commit cbaad0c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/master.yaml b/.github/workflows/master.yaml
@@ -7,6 +7,9 @@ on:
 
 jobs:
   deploy-terraform:
+    permissions:
+      id-token: write
+      contents: read
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout test-infra ⤵️
@@ -34,5 +37,9 @@ jobs:
           sudo apt update && sudo apt install -y which
        
       - name: Deploy prow
+        env:
+          PROW_HMAC_TOKEN: ${{ secrets.PROW_HMAC_TOKEN }}
+          PROW_OAUTH_TOKEN: ${{ secrets.PROW_OAUTH_TOKEN }}
+          PROW_SERVICE_ACCOUNT_JSON: ${{ secrets.PROW_SERVICE_ACCOUNT_JSON }}
         run: |
           ./tools/deploy_prow.sh