checkout and specify access token

Signed-off-by: Bob Callaway <[email protected]>
bobcallaway · Feb 3, 2025 · 643f44f · 643f44f
1 parent f322fa9
commit 643f44f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/migrate-secrets.yml b/.github/workflows/migrate-secrets.yml
@@ -13,9 +13,14 @@ jobs:
       id-token: write
 
     steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
       - name: Authenticate to Google Cloud
         uses: google-github-actions/auth@6fc4af4b145ae7821d527454aa9bd537d1f2dc5f # v0.8.1
         with:
+          token_format: 'access_token'
           workload_identity_provider: projects/306323169285/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider
           service_account: [email protected]