qackage: add prod policy (#90)

joshrwolf · web-flow · commit 2b074e3ae60c · 2025-12-12T12:24:48.000-05:00
diff --git a/.github/chainguard/qackage.sts.yaml b/.github/chainguard/qackage.sts.yaml
@@ -0,0 +1,11 @@
+issuer: https://accounts.google.com
+# qackage@prod-enforce-fabc.iam.gserviceaccount.com
+subject: "110452209377641458785"
+
+permissions:
+  contents: read
+  checks: write
+  pull_requests: read
+
+repositories:
+  - os
