Skip to content

Commit 4eb467e

Browse files
committed
fix: Update Azure login step to use OIDC and add necessary secrets
1 parent c355e4d commit 4eb467e

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

.github/workflows/ci.yml

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,8 @@ jobs:
6666
runs-on: ubuntu-latest
6767
needs: tests
6868
permissions:
69-
contents: 'read'
69+
contents: read
70+
id-token: write
7071
env:
7172
ACR_NAME: gabby
7273
REGISTRY: gabby.azurecr.io
@@ -76,10 +77,12 @@ jobs:
7677
- name: Checkout
7778
uses: actions/checkout@v4
7879

79-
- name: Azure Login
80+
- name: Azure Login (OIDC)
8081
uses: azure/login@v2
8182
with:
82-
creds: '{}'
83+
client-id: ${{ secrets.AZURE_CLIENT_ID }}
84+
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
85+
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
8386

8487
- name: Login to Azure Container Registry
8588
run: az acr login --name $ACR_NAME

0 commit comments

Comments
 (0)