use octo sts token

amber-beasley-liatrio · Jan 16, 2025 · 5d8ad0e · 5d8ad0e
1 parent 232208c
commit 5d8ad0e
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -10,11 +10,17 @@ jobs:
       contents: write
     runs-on: ubuntu-latest
     steps:
+      - uses: octo-sts/action@6177b4481c00308b3839969c3eca88c96a91775f # v1.0.0
+        id: octo-sts
+        with:
+          # can only run on main branch
+          scope: amber-beasley-liatrio/learning-actions
+          identity: semantic-release
       - name: Setup oras
         uses: oras-project/setup-oras@v1
       - name: Oras version
         run: oras version
       - name: Oras login
-        run: oras login ghcr.io --username ${{ github.actor }} --password ${{ github.token }}
+        run: echo "${{ steps.octo-sts.outputs.token }}" | oras login ghcr.io --username ${{ github.actor }} --password-stdin
       - name: Oras push
         run: oras push ghcr.io/someorg/policy-hello:1.0.0