Merge pull request #60 from moj-analytical-services/test/octo-sts

Signed-off-by: Jacob Woffenden <[email protected]>

Author: jacobwoffenden

.github/analytical-platform/octo-sts.json

@@ -0,0 +1,17 @@
+[
+  {
+    "scope": "moj-analytical-services/octo-sts-1",
+    "identity": "analytical-platform-python-uv-example",
+    "branch": "main"
+  },
+  {
+    "scope": "moj-analytical-services/octo-sts-2",
+    "identity": "analytical-platform-python-uv-example",
+    "branch": "main"
+  },
+  {
+    "scope": "ministryofjustice/octo-sts-test",
+    "identity": "moj-analytical-services-analytical-platform-python-uv-example",
+    "branch": "main"
+  }
+]

.github/workflows/release-container.yml

@@ -13,4 +13,4 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    uses: ministryofjustice/analytical-platform-airflow-github-actions/.github/workflows/shared-release-container.yml@2535a999924998baeb46c740720a61523ca8efa9 # v1.11.0
+    uses: ministryofjustice/analytical-platform-airflow-github-actions/.github/workflows/shared-release-container.yml@fe80a7bd4ad022fb14e50b94637baef2e564013c # v2.0.0

.github/workflows/scan-container.yml

@@ -12,7 +12,8 @@ jobs:
   scan-container:
     permissions:
       contents: read
+      id-token: write
       pull-requests: write
-    uses: ministryofjustice/analytical-platform-airflow-github-actions/.github/workflows/shared-scan-container.yml@2535a999924998baeb46c740720a61523ca8efa9 # v1.11.0
+    uses: ministryofjustice/analytical-platform-airflow-github-actions/.github/workflows/shared-scan-container.yml@fe80a7bd4ad022fb14e50b94637baef2e564013c # v2.0.0
     with:
       runtime: python

.github/workflows/test-container.yml

@@ -12,5 +12,6 @@ jobs:
   test-container:
     permissions:
       contents: read
+      id-token: write
       pull-requests: write
-    uses: ministryofjustice/analytical-platform-airflow-github-actions/.github/workflows/shared-test-container.yml@2535a999924998baeb46c740720a61523ca8efa9 # v1.11.0
+    uses: ministryofjustice/analytical-platform-airflow-github-actions/.github/workflows/shared-test-container.yml@fe80a7bd4ad022fb14e50b94637baef2e564013c # v2.0.0

.github/workflows/test.yml

@@ -14,13 +14,18 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
+      id-token: write
     steps:
       - name: Checkout
         id: checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
+      - name: Octo STS
+        id: octo_sts
+        uses: ministryofjustice/analytical-platform-github-actions/octo-sts@8b6e720fdc9ecc1fd16342f88d84496ebdd6b244 # v3.0.0
+
       - name: Build
         id: build
         uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0

Dockerfile

@@ -4,11 +4,12 @@ FROM ghcr.io/ministryofjustice/analytical-platform-airflow-python-base:1.14.0@sh
 ENV UV_COMPILE_BYTECODE=1
 
 COPY src/ .
+# COPY moj-analytical-services/octo-sts-1 octo-sts-1
 
 RUN --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
     --mount=type=bind,source=uv.lock,target=uv.lock \
 <<EOF
-uv sync --frozen --no-dev --no-editable --no-install-project 
+uv sync --frozen --no-dev --no-editable --no-install-project
 EOF
 
 ENTRYPOINT ["uv", "run", "main.py"]