Update updates.sts.yaml

Signed-off-by: John Osborne <josborne@chainguard.dev>
chainguard-dev · Nov 21, 2024 · 6f1a59a · 6f1a59a
1 parent 3ec7874
commit 6f1a59a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/chainguard/updates.sts.yaml b/.github/chainguard/updates.sts.yaml
@@ -2,7 +2,9 @@
 # SPDX-License-Identifier: Apache-2.0
 
 issuer: https://token.actions.githubusercontent.com
-subject_pattern: repo:chainguard-dev/chainguard-migration-demo.*
+subject_pattern: repo:chainguard-dev/chainguard-migration-demo:.*
+claim_pattern:
+  job_workflow_ref: chainguard-dev/chainguard-migration-demo/.github/workflows/updates.yaml@.*
 
 permissions:
   contents: write