Skip to content

New: [AEA-0000] - Tag jira when release is created #401

New: [AEA-0000] - Tag jira when release is created

New: [AEA-0000] - Tag jira when release is created #401

Workflow file for this run

name: Pull Request
on:
pull_request:
branches: [main]
env:
BRANCH_NAME: ${{ github.event.pull_request.head.ref }}
jobs:
dependabot-auto-approve-and-merge:
needs: quality_checks
uses: ./.github/workflows/dependabot-auto-approve-and-merge.yml
secrets:
AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}
pr_title_format_check:
uses: ./.github/workflows/pr_title_check.yml
get_config_values:
uses: ./.github/workflows/get-repo-config.yml
with:
verify_published_from_main_image: false
quality_checks:
uses: ./.github/workflows/quality-checks-devcontainer.yml
needs: [get_config_values]
with:
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
secrets:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
tag_release:

Check failure on line 34 in .github/workflows/pull_request.yml

View workflow run for this annotation

GitHub Actions / Pull Request

Invalid workflow file

The workflow is not valid. .github/workflows/pull_request.yml (Line: 34, Col: 3): Error calling workflow 'NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@1be8b4570efa83796289515db6fed8e0f0838ff9'. The nested job 'tag_release' is requesting 'id-token: write', but is only allowed 'id-token: none'.
needs: get_config_values
uses: ./.github/workflows/tag-release-devcontainer.yml
permissions:
contents: read
packages: read
attestations: read
with:
dry_run: true
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
branch_name: ${{ github.event.pull_request.head.ref }}
tag_format: ${{ needs.get_config_values.outputs.tag_format }}
secrets: inherit