Add staging-autofix STS policy for os repo

tcnghia · tcnghia · commit 8844f322f2f8 · 2025-11-11T12:37:37.000-08:00
Signed-off-by: Nghia Tran &lt;tcnghia@gmail.com&gt;
diff --git a/.github/chainguard/staging-autofix.sts.yaml b/.github/chainguard/staging-autofix.sts.yaml
@@ -0,0 +1,14 @@
+issuer: https://accounts.google.com
+# autofix@staging-enforce-cd1e.iam.gserviceaccount.com
+subject: "118295070799166027529"
+
+permissions:
+  actions: read
+  checks: write
+  contents: write
+  pull_requests: read
+  statuses: read
+  workflows: write # Allow triggering actions when authoring commits.
+
+repositories:
+  - os
