Workflow permission updated

celo-org · Jan 16, 2024 · 2f799dc · 2f799dc
1 parent 342ad53
commit 2f799dc
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 12 deletions.
diff --git a/.github/workflows/cron.yml b/.github/workflows/cron.yml
@@ -5,6 +5,7 @@ on:
   schedule:
     # Daily at 9AM
     - cron: "0 9 * * *"
+
 
 jobs:
   update_ofac_list:
@@ -15,7 +16,19 @@ jobs:
       contents: write
 
     steps:
+      - name: Get GitHub Token from Akeyless
+        id: get_github_token
+        uses:
+          docker://us-west1-docker.pkg.dev/devopsre/akeyless-public/akeyless-action:latest
+        with:
+          api-url: https://api.gateway.akeyless.celo-networks-dev.org
+          access-id: p-kf9vjzruht6l
+          dynamic-secrets: '{"/dynamic-secrets/keys/github/compliance/contents=write,pull_requests=write":"PAT"}'
+
       - uses: actions/checkout@v4
+        with:
+          token: ${{ env.PAT }}
+
       - uses: actions/setup-node@v3
         with:
           node-version: "18.x"

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -14,14 +14,7 @@ jobs:
       repository-projects: write
 
     steps:
-      - name: Get GitHub Token from Akeyless
-        id: get_github_token
-        uses:
-          docker://us-west1-docker.pkg.dev/devopsre/akeyless-public/akeyless-action:latest
-        with:
-          api-url: https://api.gateway.akeyless.celo-networks-dev.org
-          access-id: p-kf9vjzruht6l
-          dynamic-secrets: '{"/dynamic-secrets/keys/github/compliance/contents=write,pull_requests=write":"PAT"}'
+      - uses: actions/checkout@v4
 
       - name: Get NPM Token from Akeyless
         id: get_npmjs_token
@@ -31,10 +24,6 @@ jobs:
           access-id: p-kf9vjzruht6l
           static-secrets: '{"/static-secrets/NPM/npm-publish-token":"NPM_TOKEN"}'
 
-      - uses: actions/checkout@v4
-        with:
-          token: ${{ env.PAT }}
-
       - uses: actions/setup-node@v3
         with:
           node-version: "18.x"