fix: add ecr auth to GitHub Actions role (#361)

Need to give permissions for the GitHub Actions role to read the ECR authorization token such that it can auth to push and pull from the repo. Signed-off-by: Gavin Inglis <[email protected]>
runfinch · Jul 27, 2023 · a8b96ab · a8b96ab
1 parent 613dca5
commit a8b96ab
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/lib/continuous-integration-stack.ts b/lib/continuous-integration-stack.ts
@@ -50,6 +50,7 @@ export class ContinuousIntegrationStack extends cdk.Stack {
 
     const repo = props.rootfsEcrRepository;
     repo.grantPullPush(githubActionsRole);
+    ecr.AuthorizationToken.grantRead(githubActionsRole)
 
     new CloudfrontCdn(this, 'DependenciesCloudfrontCdn', {
       bucket