From dc171df08f4062dc57280ff0f02bb04804c6d1a6 Mon Sep 17 00:00:00 2001 From: Alexander Tarasov Date: Wed, 9 Sep 2026 22:23:32 +0200 Subject: [PATCH] ref(ci): use scoped image-push service account Refs SEC-1875 Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/image.yml | 6 +++--- .github/workflows/python-example-image.yml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml index 8398f210..8762ce7d 100644 --- a/.github/workflows/image.yml +++ b/.github/workflows/image.yml @@ -22,7 +22,7 @@ jobs: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Build and push taskbroker image - uses: getsentry/action-build-and-push-images@8fc75e483c09a68721f2c8951292ee17f8821766 + uses: getsentry/action-build-and-push-images@dd9b907092cdd2dbc6c1a409f7290df1b391f6ee with: image_name: 'taskbroker' platforms: linux/${{ matrix.platform }} @@ -78,7 +78,7 @@ jobs: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Build and push taskbroker image - uses: getsentry/action-build-and-push-images@8fc75e483c09a68721f2c8951292ee17f8821766 + uses: getsentry/action-build-and-push-images@dd9b907092cdd2dbc6c1a409f7290df1b391f6ee with: image_name: 'taskbroker' platforms: linux/amd64 @@ -90,7 +90,7 @@ jobs: tag_latest: true google_ar_image_name: ${{ matrix.image }} google_workload_identity_provider: projects/868781662168/locations/global/workloadIdentityPools/prod-github/providers/github-oidc-pool - google_service_account: gha-gcr-push@sac-prod-sa.iam.gserviceaccount.com + google_service_account: gha-taskbroker-push@sac-prod-sa.iam.gserviceaccount.com self-hosted-end-to-end: needs: [assemble-taskbroker-image] diff --git a/.github/workflows/python-example-image.yml b/.github/workflows/python-example-image.yml index 9a2f233b..953a08f9 100644 --- a/.github/workflows/python-example-image.yml +++ b/.github/workflows/python-example-image.yml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Build and push Python example image - uses: getsentry/action-build-and-push-images@a53f146fc1ea3cb404f2dcf7378f5b60dd98d3ca + uses: getsentry/action-build-and-push-images@dd9b907092cdd2dbc6c1a409f7290df1b391f6ee with: image_name: 'taskbroker-python-example' platforms: linux/amd64