From d0abb034995cd5ce959d8269dfca601bbe2bc7af Mon Sep 17 00:00:00 2001 From: alvarof2 Date: Tue, 12 Nov 2024 17:29:18 +0100 Subject: [PATCH] Use read-only GCP SA --- .github/workflows/update-geth.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/update-geth.yaml b/.github/workflows/update-geth.yaml index ee534f47bb66..e97684c812d4 100644 --- a/.github/workflows/update-geth.yaml +++ b/.github/workflows/update-geth.yaml @@ -23,8 +23,8 @@ jobs: - name: Login at GCP Artifact Registry uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@v2.0 with: - workload-id-provider: "projects/1094498259535/locations/global/workloadIdentityPools/gh-optimism/providers/github-by-repos" - service-account: "celo-optimism-gh@devopsre.iam.gserviceaccount.com" + workload-id-provider: "projects/1094498259535/locations/global/workloadIdentityPools/gh-optimism-ro/providers/github-by-repos" + service-account: "celo-optimism-gh-ro@devopsre.iam.gserviceaccount.com" docker-gcp-registries: us-west1-docker.pkg.dev access-token-lifetime: "2m" - name: "Set up Cloud SDK"