diff --git a/.github/workflows/azure-static-web-apps-agreeable-grass-0385a320f.yml b/.github/workflows/azure-static-web-apps-brave-stone-00624df0f.yml similarity index 71% rename from .github/workflows/azure-static-web-apps-agreeable-grass-0385a320f.yml rename to .github/workflows/azure-static-web-apps-brave-stone-00624df0f.yml index d9a4265..4731e9a 100644 --- a/.github/workflows/azure-static-web-apps-agreeable-grass-0385a320f.yml +++ b/.github/workflows/azure-static-web-apps-brave-stone-00624df0f.yml @@ -14,23 +14,36 @@ jobs: if: github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.action != 'closed') runs-on: ubuntu-latest name: Build and Deploy Job + permissions: + id-token: write + contents: read steps: - uses: actions/checkout@v3 with: submodules: true lfs: false + - name: Install OIDC Client from Core Package + run: npm install @actions/core@1.6.0 @actions/http-client + - name: Get Id Token + uses: actions/github-script@v6 + id: idtoken + with: + script: | + const coredemo = require('@actions/core') + return await coredemo.getIDToken() + result-encoding: string - name: Build And Deploy id: builddeploy uses: Azure/static-web-apps-deploy@v1 with: - azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_AGREEABLE_GRASS_0385A320F }} - repo_token: ${{ secrets.GITHUB_TOKEN }} # Used for Github integrations (i.e. PR comments) + azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_BRAVE_STONE_00624DF0F }} action: "upload" ###### Repository/Build Configurations - These values can be configured to match your app requirements. ###### # For more information regarding Static Web App workflow configurations, please visit: https://aka.ms/swaworkflowconfig app_location: "/" # App source code path api_location: "" # Api source code path - optional output_location: "" # Built app content directory - optional + github_id_token: ${{ steps.idtoken.outputs.result }} ###### End of Repository/Build Configurations ###### close_pull_request_job: @@ -42,5 +55,4 @@ jobs: id: closepullrequest uses: Azure/static-web-apps-deploy@v1 with: - azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_AGREEABLE_GRASS_0385A320F }} action: "close"