update polcies (#10)

cpanato · web-flow · commit 093f4f0e45a0 · 2025-05-28T20:29:13.000+02:00
diff --git a/.github/chainguard/sync-github.sts.yaml b/.github/chainguard/sync-github.sts.yaml
@@ -7,7 +7,8 @@ claim_pattern:
   job_workflow_ref: chainguard-dev/infra/.github/workflows/.terraform.yaml@.*
 
 permissions:
-  administration: write # to add/remove repositories
+  administration: read # required to read the repository
+  contents: write # required per terraform docs (https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository)
   members: write # to add/remove GitHub members
   metadata: read # to read metadata about the org
 
diff --git a/.github/chainguard/verify-github.sts.yaml b/.github/chainguard/verify-github.sts.yaml
@@ -8,7 +8,7 @@ claim_pattern:
 
 permissions:
   administration: read # required to read the repository
-  contents: read # required per terraform docs (https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository)
+  contents: write # required per terraform docs (https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository)
   members: read # to add/remove GitHub members
   metadata: read # to read metadata about the org
 
