Skip to content

Chore: [AEA-0000] - add tflint to eps-storage-terraform (#94) #86

Chore: [AEA-0000] - add tflint to eps-storage-terraform (#94)

Chore: [AEA-0000] - add tflint to eps-storage-terraform (#94) #86

Workflow file for this run

name: merge to main workflow
on:
push:
branches: [main]
permissions: {}
jobs:
get_config_values:
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@e798d5aee897de6f7dc387dd5623fcd9ba4c8929
with:
verify_published_from_main_image: true
permissions:
attestations: read
contents: read
packages: read
quality_checks:
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@e798d5aee897de6f7dc387dd5623fcd9ba4c8929
needs:
- get_config_values
permissions:
contents: read
packages: read
id-token: write
with:
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
secrets:
SONAR_TOKEN: '${{ secrets.SONAR_TOKEN }}'
tag_release:

Check failure on line 28 in .github/workflows/ci.yml

View workflow run for this annotation

GitHub Actions / merge to main workflow

Invalid workflow file

The workflow is not valid. .github/workflows/ci.yml (Line: 28, Col: 3): Error calling workflow 'NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@e798d5aee897de6f7dc387dd5623fcd9ba4c8929'. The nested job 'tag_release' is requesting 'packages: write', but is only allowed 'packages: none'.
needs: [quality_checks, get_config_values]
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@e798d5aee897de6f7dc387dd5623fcd9ba4c8929
permissions:
id-token: write
contents: write
with:
dry_run: true
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
branch_name: main
tag_format: ${{ needs.get_config_values.outputs.tag_format }}
build_all_images:
needs:
- tag_release
- get_config_values
uses: ./.github/workflows/build_all_images.yml
permissions:
attestations: write
contents: read
packages: write
id-token: write
with:
docker_tag: 'ci-${{ needs.tag_release.outputs.version_tag }}'
tag_latest: false
NO_CACHE: false