depot

.github/workflows/build.yml

@@ -19,7 +19,6 @@ permissions:
   issues: write
   pull-requests: write
   actions: write
-  id-token: write
 
 jobs:
   core:

.github/workflows/lint.yml

@@ -19,9 +19,6 @@ on:
         required: true
         type: string
 
-permissions:
-  id-token: write
-
 jobs:
   lint-skip:
     name: lint skip
@@ -57,12 +54,12 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - uses: depot/setup-action@v1
-        with:
-          oidc: true              
       - name: Install Dev Container CLI
         run: npm install -g @devcontainers/cli@0.80.0
       - name: Lint and Unit Test All JavaScript Code
         run: npm run devcontainer:lint-unit
+        env:
+          DEPOT_TOKEN: ${{ secrets.DEPOT_TOKEN }}
 
   core:
     name: core

.github/workflows/login-container.yml

@@ -20,7 +20,6 @@ on:
 
 permissions:
   packages: write
-  id-token: write
 
 env:
   default_labels: |
@@ -37,8 +36,6 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: depot/setup-action@v1
-        with:
-          oidc: true  
       - name: Login meta
         id: login-meta
         uses: docker/metadata-action@v5
@@ -59,6 +56,7 @@ jobs:
         uses: depot/bake-action@v1
         env:
           NODE_VERSION: ${{ inputs.node_version }}
+          DEPOT_TOKEN: ${{ secrets.DEPOT_TOKEN }}
         with:
           push: true
           provenance: true

.github/workflows/login-integration-test.yml

@@ -9,7 +9,6 @@ on:
 
 permissions:
   packages: write
-  id-token: write
 
 jobs:
   login-integration-test:
@@ -19,11 +18,10 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - uses: depot/setup-action@v1        
-        with:
-          oidc: true      
       - name: Install Dev Container CLI
         run: npm install -g @devcontainers/cli@0.80.0
       - name: Run Integration Tests against the Login and a Mocked Zitadel API
         run: npm run devcontainer:integration:login
         env:
           LOGIN_TAG: ${{ inputs.login_build_image }}
+          DEPOT_TOKEN: ${{ secrets.DEPOT_TOKEN }}