From 6ecac457a2bb3e0ed5015b4188491c96a29e2681 Mon Sep 17 00:00:00 2001
From: hexbabe <sean.xiaochen.yu@gmail.com>
Date: Thu, 29 Aug 2024 10:04:47 -0400
Subject: [PATCH] Update GCP creds

---
 .github/workflows/main.yml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 46f592f..27ae808 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -8,6 +8,10 @@ on:
       - 'README.md'
       - 'docs/**'
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   appimage:
     name: Build/Test/Upload latest
@@ -54,10 +58,13 @@ jobs:
           make image-test
           make test-package
 
-      - name: Authorize GCP upload
-        uses: google-github-actions/auth@v1
+      - id: 'auth'
+        name: 'Authenticate to Google Cloud'
+        uses: 'google-github-actions/auth@v1'
         with:
-          credentials_json: '${{ secrets.GCP_CREDENTIALS }}'
+          create_credentials_file: true
+          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
+          service_account: ${{ secrets.GCP_SERVICE_ACCOUNT }}
 
       - name: Deploy Files
         uses: google-github-actions/upload-cloud-storage@v0.10.4