add missing getDefaultWorkspaceImage scope for supervisor (#18790)

gitpod-io · Sep 25, 2023 · 93004e3 · 93004e3
1 parent ba79893
commit 93004e3
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/components/server/src/workspace/workspace-starter.ts b/components/server/src/workspace/workspace-starter.ts
@@ -1643,6 +1643,7 @@ export class WorkspaceStarter {
             // getIDToken is used by Gitpod's OIDC Identity Provider to check for authorisation.
             // Without this scope the workspace cannot produce ID tokens.
             "function:getIDToken",
+            "function:getDefaultWorkspaceImage",
 
             "resource:" +
                 ScopedResourceGuard.marshalResourceScope({