From 28d3ff19a7f729f8fe033513c3c04cf1f8aee500 Mon Sep 17 00:00:00 2001 From: Alexander Tarasov Date: Wed, 9 Sep 2026 22:23:02 +0200 Subject: [PATCH] ref(ci): use scoped image-push service account Refs SEC-1875 Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/build-operator.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build-operator.yaml b/.github/workflows/build-operator.yaml index 3e1c3b2e..e9575191 100644 --- a/.github/workflows/build-operator.yaml +++ b/.github/workflows/build-operator.yaml @@ -25,7 +25,7 @@ jobs: image: us-docker.pkg.dev/sentryio/streaming-operator-mr/image steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - - uses: getsentry/action-build-and-push-images@4852d671d747d7c0268b2a3fc429fee9d4a16f78 + - uses: getsentry/action-build-and-push-images@dd9b907092cdd2dbc6c1a409f7290df1b391f6ee with: image_name: 'streaming-operator' platforms: linux/amd64 @@ -36,7 +36,7 @@ jobs: google_ar: true google_ar_image_name: ${{ matrix.image }} google_workload_identity_provider: projects/868781662168/locations/global/workloadIdentityPools/prod-github/providers/github-oidc-pool - google_service_account: gha-gcr-push@sac-prod-sa.iam.gserviceaccount.com + google_service_account: gha-streams-push@sac-prod-sa.iam.gserviceaccount.com publish-chart: name: Publish Helm chart