depot

.github/workflows/build.yml

@@ -19,6 +19,7 @@ permissions:
   issues: write
   pull-requests: write
   actions: write
+  oidc: write
 
 jobs:
   core:

.github/workflows/lint.yml

@@ -19,6 +19,9 @@ on:
         required: true
         type: string
 
+permissions:
+  oidc: write
+
 jobs:
   lint-skip:
     name: lint skip
@@ -54,6 +57,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - uses: depot/setup-action@v1
+        with:
+          oidc: true              
       - name: Install Dev Container CLI
         run: npm install -g @devcontainers/cli@0.80.0
       - name: Lint and Unit Test All JavaScript Code

.github/workflows/login-container.yml

@@ -20,6 +20,7 @@ on:
 
 permissions:
   packages: write
+  oidc: write
 
 env:
   default_labels: |
@@ -36,6 +37,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: depot/setup-action@v1
+        with:
+          oidc: true  
       - name: Login meta
         id: login-meta
         uses: docker/metadata-action@v5
@@ -55,7 +58,6 @@ jobs:
       - name: Bake login multi-arch
         uses: depot/bake-action@v1
         env:
-          DEPOT_TOKEN: ${{ secrets.DEPOT_TOKEN }}
           NODE_VERSION: ${{ inputs.node_version }}
         with:
           push: true

.github/workflows/login-integration-test.yml

@@ -7,6 +7,10 @@ on:
         required: true
         type: string
 
+permissions:
+  packages: write
+  oidc: write
+
 jobs:
   login-integration-test:
     name: login-integration-test
@@ -15,6 +19,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - uses: depot/setup-action@v1        
+        with:
+          oidc: true      
       - name: Install Dev Container CLI
         run: npm install -g @devcontainers/cli@0.80.0
       - name: Run Integration Tests against the Login and a Mocked Zitadel API