Update secrets and permissions in deployment workflow (#3240)

Signed-off-by: Timothy Johnson <[email protected]>
zowe · Oct 15, 2024 · 94a62db · 94a62db
1 parent f3eb4b0
commit 94a62db
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/deployment.yml b/.github/workflows/deployment.yml
@@ -20,6 +20,10 @@ jobs:
   release:
     if: github.event_name == 'workflow_dispatch' || github.ref_protected
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+      pull-requests: write
 
     steps:
       - name: Checkout
@@ -53,8 +57,8 @@ jobs:
           GIT_CREDENTIALS: x-access-token:${{ secrets.ZOWE_ROBOT_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_PUBLISHER_TOKEN }}
-          OVSX_PAT: ${{ secrets.VSCODE_ZOWE_ROBOT_PUBLISH_TOKEN }}
-          VSCE_PAT: ${{ secrets.VSCODE_PUBLISHER_TOKEN }}
+          OVSX_PAT: ${{ secrets.VSCODE_OVSX_PUBLISHER_TOKEN }}
+          VSCE_PAT: ${{ secrets.VSCODE_VSCE_PUBLISHER_TOKEN }}
         with:
           config-dir: .github
           new-version: ${{ github.event.inputs.version }}