chore: grant packages.write for image workflow (argoproj#11358)

* chore: grant packages.write for image workflow Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com> * use github token instead of PAT Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com> Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>
ashutosh16 · Nov 23, 2022 · a24bf6b · a24bf6b
1 parent cb4acf9
commit a24bf6b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
@@ -23,6 +23,7 @@ jobs:
   publish:
     permissions:
       contents: write  # for git to push upgrade commit if not already deployed
+      packages: write  # for pushing packages to GHCR, which is used by cd.apps.argoproj.io to avoid polluting Quay with tags
     if: github.repository == 'argoproj/argo-cd'
     runs-on: ubuntu-22.04
     env:
@@ -47,7 +48,7 @@ jobs:
         if: github.event_name == 'push'
         env:
           USERNAME: ${{ secrets.USERNAME }}
-          PASSWORD: ${{ secrets.TOKEN }}
+          PASSWORD: ${{ secrets.GITHUB_TOKEN }}
           DOCKER_USERNAME: ${{ secrets.RELEASE_QUAY_USERNAME }}
           DOCKER_TOKEN: ${{ secrets.RELEASE_QUAY_TOKEN }}