fix: typo in GA file

Signed-off-by: ThibaultLengagne <[email protected]>
padok-team · Apr 18, 2024 · beffb77 · beffb77
1 parent 749fbe5
commit beffb77
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/.github/workflows/demo.yml b/.github/workflows/demo.yml
@@ -7,7 +7,7 @@ on:
 
 permissions:
   id-token: write
-  content: read
+  contents: read
 
 env:
   AWS_REGION : "eu-west-3"

diff --git a/terraform/layers/main/iam.tf b/terraform/layers/main/iam.tf
@@ -39,10 +39,8 @@ resource "aws_iam_role" "github" {
                 },
                 "Action": "sts:AssumeRoleWithWebIdentity",
                 "Condition": {
-                    "StringLike": {
-                        "token.actions.githubusercontent.com:sub": "repo:padok-team/demo-github-actions-oidc:*"
-                    },
                     "StringEquals": {
+                        "token.actions.githubusercontent.com:sub": "repo:padok-team/demo-github-actions-oidc:ref:refs/heads/main",
                         "token.actions.githubusercontent.com:aud": "sts.amazonaws.com"
                     }
                 }