Skip to content

feat: add libraries-gen Octo STS policies#276

Draft
klrmngr wants to merge 1 commit into
chainguard-dev:mainfrom
klrmngr:libraries-gen-octosts-policies
Draft

feat: add libraries-gen Octo STS policies#276
klrmngr wants to merge 1 commit into
chainguard-dev:mainfrom
klrmngr:libraries-gen-octosts-policies

Conversation

@klrmngr

@klrmngr klrmngr commented Jul 22, 2026

Copy link
Copy Markdown
Member

Summary

  • add staging-libraries-gen and dev-klrmngr-libraries-gen trust policies
  • scope repository access to chainguard-dev/ecosystems-packages
  • grant the GitHub permissions needed to create and maintain pull requests and workflows

Blocker

Both subjects are intentionally TODO until the Terraform stage creates the service accounts. Replace each TODO with the corresponding service account unique ID before merging.

No production policy is included.

Validation

  • YAML parsed successfully
  • git diff --check

Signed-off-by: Kai <kaiming.zhang@chainguard.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant