diff --git a/.github/workflows/publish_dev_docker_image.yaml b/.github/workflows/publish_dev_docker_image.yaml index c3accdd..d7634e2 100644 --- a/.github/workflows/publish_dev_docker_image.yaml +++ b/.github/workflows/publish_dev_docker_image.yaml @@ -8,6 +8,11 @@ jobs: push_to_registry: name: Push Docker image to GitHub Container Registry(dev) runs-on: ubuntu-latest + permissions: + contents: read + packages: write + attestations: write + id-token: write steps: - name: Check out the repo @@ -24,7 +29,7 @@ jobs: with: registry: ghcr.io username: ${{ github.repository_owner }} - password: ${{ secrets.CR_PAT }} + password: ${{ secrets.GITHUB_TOKEN }} - name: Build and push to GitHub Container Registry uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 diff --git a/.github/workflows/publish_docker_image.yaml b/.github/workflows/publish_docker_image.yaml index 5b08651..f23d9be 100644 --- a/.github/workflows/publish_docker_image.yaml +++ b/.github/workflows/publish_docker_image.yaml @@ -7,6 +7,11 @@ jobs: push_to_registry: name: Push Docker image to GitHub Container Registry(latest) runs-on: ubuntu-latest + permissions: + contents: read + packages: write + attestations: write + id-token: write steps: - name: Check out the repo @@ -29,7 +34,7 @@ jobs: with: registry: ghcr.io username: ${{ github.repository_owner }} - password: ${{ secrets.CR_PAT }} + password: ${{ secrets.GITHUB_TOKEN }} - name: Build and push to GitHub Container Registry uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 diff --git a/README.md b/README.md index c400df8..1e81444 100644 --- a/README.md +++ b/README.md @@ -28,10 +28,8 @@ find . -type f | xargs sed -i '' -e "s/go-template/example/g" ### DockerイメージをGitHub Container Registryで公開する際の注意点 -デフォルトでは`CR_PAT`が渡されないためGitHub Actionsでのイメージのビルド/プッシュに失敗します。 -また、パッケージを公開したい場合は初回のみ手作業が必要です。 - -このためDockerイメージをGitHub Container Registryで公開したい場合はオーガニゼーション管理者にご相談ください。 +DockerイメージをGitHub Container Registryで公開したい場合はオーガニゼーション管理者にご相談ください。 +パッケージを公開したい場合は初回のみ手作業が必要です。 ## License