From 29123422fa3a6a1b234869bd84952e992937805c Mon Sep 17 00:00:00 2001 From: Alexander Tarasov Date: Wed, 9 Sep 2026 22:24:05 +0200 Subject: [PATCH] ref(ci): use scoped image-push service account Refs SEC-1875 Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/image.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml index 431c920..cd31a6d 100644 --- a/.github/workflows/image.yaml +++ b/.github/workflows/image.yaml @@ -17,7 +17,7 @@ jobs: - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4.2.2 - name: Build and push image - uses: getsentry/action-build-and-push-images@b172ab61a5f7eabd58bd42ce231b517e79947c01 + uses: getsentry/action-build-and-push-images@dd9b907092cdd2dbc6c1a409f7290df1b391f6ee with: image_name: 'usage-accountant' platforms: linux/amd64 @@ -28,4 +28,4 @@ jobs: tag_latest: true google_ar_image_name: us-central1-docker.pkg.dev/sentryio/usage-accountant/image google_workload_identity_provider: projects/868781662168/locations/global/workloadIdentityPools/prod-github/providers/github-oidc-pool - google_service_account: gha-gcr-push@sac-prod-sa.iam.gserviceaccount.com + google_service_account: gha-usage-accountant-push@sac-prod-sa.iam.gserviceaccount.com