BLD: fix snyk auth CI

equinor · Dec 11, 2023 · 80ee3c7 · 80ee3c7
1 parent d6dea5c
commit 80ee3c7
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -6,6 +6,10 @@ name: build
 on:
   workflow_dispatch:
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   test3d:
     uses: equinor/warmth/.github/workflows/python-test-3d.yml@main
@@ -19,6 +23,8 @@ jobs:
       action_type: ${{ github.event.action}}
   snyk:
     uses: equinor/warmth/.github/workflows/snyk.yml@main
+    secrets:
+      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
   docs:
     uses: equinor/warmth/.github/workflows/docs.yml@main
 

diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
@@ -3,6 +3,9 @@ on:
     push:
         branches: [main, dev]
     workflow_call:
+      secrets:
+        SNYK_TOKEN:
+          required: true
 jobs:
   security:
     runs-on: ubuntu-latest