]> git.kaiwu.me - nginx.git/commitdiff
projects / nginx.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 398a48e)
GH: request an id token and pass secrets to a callee in buildbot.yml
authorKonstantin Pavlov <k.pavlov@f5.com>
Mon, 28 Sep 2026 21:13:07 +0000 (14:13 -0700)
committerSergey Kandaurov <pluknet@nginx.com>
Tue, 20 Oct 2026 10:51:36 +0000 (14:51 +0400)
Both are required to be able to do authentication in a callee workflow.

.github/workflows/buildbot.yml patch | blob | history

diff --git a/.github/workflows/buildbot.yml b/.github/workflows/buildbot.yml
index 490491f3622ccd66d4549ebff6bb9848cfc1a6b5..5b8993a0ed2f2d580170902acd7621f51a070287 100644 (file)
--- a/.github/workflows/buildbot.yml
+++ b/.github/workflows/buildbot.yml
@@ -8,7 +8,9 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   buildbot:
     uses: nginx/ci-self-hosted/.github/workflows/nginx-buildbot.yml@main
+    secrets: inherit
nginx upstream