Skip to content

Commit 0886dca

Browse files
authored
Select dispatch-wheel-builds octo-sts policy per source repo (#24245)
The dispatch job hardcoded the integrations-core.dispatch-wheel-builds octo-sts policy, so releases driven from marketplace or integrations-extras requested a policy whose subject/repository claims never match the caller, yielding a 403 permission denied. Derive the policy name from source-repo so each repo uses its own dispatch-wheel-builds trust policy.
1 parent 40b55c1 commit 0886dca

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/release-dispatch.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -156,7 +156,7 @@ jobs:
156156
uses: DataDog/dd-octo-sts-action@08f2144903ced3254a3dafec2592563409ba2aa0 # v1.0.1
157157
with:
158158
scope: DataDog/agent-integration-wheels-release
159-
policy: integrations-core.dispatch-wheel-builds
159+
policy: ${{ inputs.source-repo || 'integrations-core' }}.dispatch-wheel-builds
160160

161161
- name: Dispatch release
162162
uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3.0.0

0 commit comments

Comments
 (0)