Create a trust policy for prod pvc (#76)

mattmoor · web-flow · commit 4ae7a03a7a95 · 2025-10-27T13:04:11.000-07:00
Signed-off-by: Matt Moore &lt;mattmoor@chainguard.dev&gt;
diff --git a/.github/chainguard/package-version-check.sts.yaml b/.github/chainguard/package-version-check.sts.yaml
@@ -0,0 +1,12 @@
+issuer: https://accounts.google.com
+
+# package-version-check@prod-enforce-fabc.iam.gserviceaccount.com
+subject: "116872402444336901940"
+
+permissions:
+  contents: read
+  checks: write
+  pull_requests: read
+
+repositories:
+- os
