update push-ci

cryostatio · Nov 20, 2023 · 15c09ab · 15c09ab
1 parent 6b43da7
commit 15c09ab
Showing 1 changed file with 12 additions and 7 deletions.
diff --git a/.github/workflows/push-ci.yml b/.github/workflows/push-ci.yml
@@ -15,29 +15,34 @@ on:
 jobs:
   code-analysis:
     uses: ./.github/workflows/ci-code-analysis.yml
+    if: github.repository_owner == 'cryostatio'
     with:
       checkout-repo: ${{ github.event.pull_request.head.repo.full_name }}
       checkout-ref: ${{ github.event.pull_request.head.ref }}
-    secrets: inherit
-    if: github.repository_owner == 'cryostatio'
+
   build-and-test-amd64:
     uses: ./.github/workflows/ci-build-image.yml
-    secrets: inherit
+    permissions:
+      pull-requests: write
+    if: github.repository_owner == 'cryostatio'
     with:
       build-arch: amd64
-    if: github.repository_owner == 'cryostatio'
+
   build-and-test-arm64:
     uses: ./.github/workflows/ci-build-image.yml
-    secrets: inherit
+    permissions:
+      pull-requests: write
+    if: github.repository_owner == 'cryostatio'
     with:
       build-arch: arm64
-    if: github.repository_owner == 'cryostatio'
+
   push-to-quay:
     runs-on: ubuntu-latest
     needs: [code-analysis, build-and-test-amd64, build-and-test-arm64]
     env:
       CRYOSTAT_IMG: quay.io/cryostat/cryostat
-    if: always() && github.repository_owner == 'cryostatio'
+    permissions:
+      packages: write
     steps:
     - uses: actions/download-artifact@v3
       with: