s

Author: brendan-kellam

.github/workflows/_gcp-deploy.yml

@@ -12,8 +12,6 @@ jobs:
   gcp-deploy:
     runs-on: ubuntu-latest
     environment: ${{ inputs.environment }}
-    permissions:
-      contents: 'read'
     env:
       IMAGE_PATH: us-west1-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/sourcebot/sourcebot-${{ vars.NEXT_PUBLIC_SOURCEBOT_CLOUD_ENVIRONMENT }}
     steps:

.github/workflows/scratch-workflow.yml

@@ -8,6 +8,7 @@ on:
 jobs:
   scratch:
     uses: ./.github/workflows/_gcp-deploy.yml
+    secrets: inherit
     permissions:
       contents: 'read'
       # Requird for OIDC auth with GCP.