fix: migrations release workflow permissions

delgado3d · darora · commit 9195eb318583 · 2023-10-18T21:08:01.000+08:00
diff --git a/.github/workflows/publish-migrations.yml b/.github/workflows/publish-migrations.yml
@@ -9,6 +9,9 @@ jobs:
   build:
     runs-on: [self-hosted, linux]
     timeout-minutes: 15
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
       - name: Checkout Repo
@@ -30,13 +33,13 @@ jobs:
         env:
           AWS_S3_BUCKET: ${{ secrets.PG_INIT_SCRIPT_S3_BUCKET_STAGING }}
 
-      - name: configure aws credentials - staging
+      - name: configure aws credentials - prod
         uses: aws-actions/configure-aws-credentials@v1
         with:
           role-to-assume: ${{ secrets.PROD_AWS_ROLE }}
           aws-region: "ap-southeast-1"
 
-      - name: Deploy to S3 staging
+      - name: Deploy to S3 prod
         shell: bash
         run: aws s3 sync migrations/db s3://$AWS_S3_BUCKET/migrations/db --delete
         env:
