Add approver bot STS for prod (#83)

joedborg · web-flow · commit 05db8f5d8ba6 · 2025-11-20T20:05:28.000+01:00
Signed-off-by: Joe Borg &lt;joe.borg@chainguard.dev&gt;
diff --git a/.github/chainguard/approver-bot.sts.yaml b/.github/chainguard/approver-bot.sts.yaml
@@ -0,0 +1,12 @@
+issuer: https://accounts.google.com
+
+# approver-bot@prod-enforce-fabc.iam.gserviceaccount.com
+subject: "114898805784176589833"
+
+permissions:
+  contents: read
+  checks: read
+  pull_requests: write
+
+repositories:
+- os
