From bcbe79861849ea7f9b172004738faf3f7509b59e Mon Sep 17 00:00:00 2001 From: Phil Date: Tue, 8 Oct 2024 11:29:06 -0700 Subject: [PATCH] feat(fulfilled-bot): Grant access to prod account (#69) --- .github/chainguard/fulfilled-bot.sts.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/chainguard/fulfilled-bot.sts.yaml b/.github/chainguard/fulfilled-bot.sts.yaml index da5a36f..00ab57f 100644 --- a/.github/chainguard/fulfilled-bot.sts.yaml +++ b/.github/chainguard/fulfilled-bot.sts.yaml @@ -3,8 +3,8 @@ issuer: https://accounts.google.com # 107106855617134891633: bot-fulfilled@staging-enforce-cd1e.iam.gserviceaccount.com -# TODO(philde): Grant access to the prod service account, when available. -subject_pattern: "107106855617134891633" +# 110008571748373383893: bot-fulfilled@prod-enforce-fabc.iam.gserviceaccount.com +subject_pattern: "(107106855617134891633|110008571748373383893)" permissions: issues: read