ci: try to fix diff-to-us

Author: michalrus

.github/workflows/std.yml

@@ -27,6 +27,31 @@ concurrency:
   group: std-${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 jobs:
+
+
+  test-comments:
+    name: Test Posting a Comment
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
+      contents: read
+      issues: write
+      pull_requests: write
+    steps:
+      - name: Post Comment on the PR
+        uses: actions/github-script@v5
+        with:
+          script: |
+            const output = 'Hello, World!';
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: output,
+            });
+
+
   discover:
     outputs:
       hits: ${{ steps.discovery.outputs.hits }}
@@ -112,8 +137,13 @@ jobs:
 
   diff-to-us:
     needs: images
-    name: Comment with a Plan Diff (${{ github.ref_name }})
+    name: Comment with a Diff (${{ github.ref_name }})
     if: github.event_name == 'pull_request' && (github.base_ref == 'dev-preview' || github.head_ref == 'chore/LW-9879-lace-ops-to-sdk')
+    permissions:
+      id-token: write
+      contents: read
+      issues: write
+      pull_requests: write
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
@@ -128,7 +158,9 @@ jobs:
 
       - name: Generate the Diff
         run: |
-          nix develop -L --command bash -c '
+          echo 'export K8S_USER=eks-devs' >.envrc.local
+
+          nix develop .#x86_64-linux.local.envs.main -L --command bash -c '
             set -euo pipefail
 
             nix run -L ".#[email protected]" 2&1 \
@@ -176,7 +208,9 @@ jobs:
         run: |
           echo "Will deploy ‘${{ github.sha }}’ to ‘${{ github.ref_name }}’"
 
-          nix develop -L --command bash -c '
+          echo 'export K8S_USER=eks-devs' >.envrc.local
+
+          nix develop .#x86_64-linux.local.envs.main -L --command bash -c '
             set -euo pipefail
 
             echo yes | nix run -L ".#helm.x86_64-linux.${{ github.ref_name }}@us-east-1.apply"