Merge pull request #1123 from alphagov/sengi/fix-image-builds

Fix image build cronjobs.
alphagov · Feb 13, 2024 · f0def8e · f0def8e
2 parents 90e1b6b + 3b8a197
commit f0def8e
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 6 deletions.
diff --git a/.github/workflows/build-clamav-image.yml b/.github/workflows/build-clamav-image.yml
@@ -1,4 +1,4 @@
-name: Build and publish clamav image to ECR
+name: Build and push ClamAV image to ECR
 
 on:
   workflow_dispatch:
@@ -16,7 +16,7 @@ on:
       - "images/clamav/**"
 
   schedule:
-    - cron: '0 0 * * 1'
+    - cron: '19 2 * * 1'
 
 jobs:
   build-and-push-image:
@@ -25,3 +25,6 @@ jobs:
       gitRef: ${{ inputs.gitRef || github.ref }}
       ecrRepositoryName: clamav
       dockerfilePath: images/clamav/Dockerfile
+    permissions:
+      id-token: write
+      contents: read
diff --git a/.github/workflows/build-mongodb-image.yml b/.github/workflows/build-mongodb-image.yml
@@ -1,4 +1,4 @@
-name: Build and publish MongoDB image to ECR
+name: Build and push MongoDB image to ECR
 
 on:
   workflow_dispatch:
@@ -16,7 +16,7 @@ on:
       - images/mongodb/Dockerfile
 
   schedule:
-    - cron: '1 22 * * 1'
+    - cron: '28 3 * * 1'
 
 jobs:
   build-and-push-image:
@@ -25,3 +25,6 @@ jobs:
       gitRef: ${{ inputs.gitRef || github.ref }}
       ecrRepositoryName: mongodb
       dockerfilePath: images/mongodb/Dockerfile
+    permissions:
+      id-token: write
+      contents: read
diff --git a/.github/workflows/build-toolbox-image.yml b/.github/workflows/build-toolbox-image.yml
@@ -1,4 +1,4 @@
-name: Build and publish toolbox image to ECR
+name: Build and push toolbox image to ECR
 
 on:
   workflow_dispatch:
@@ -16,7 +16,7 @@ on:
       - "images/toolbox/Dockerfile"
 
   schedule:
-    - cron: '0 0 * * 1'
+    - cron: '8 2 * * 1'
 
 jobs:
   build-and-push-image:
@@ -25,3 +25,6 @@ jobs:
       gitRef: ${{ inputs.gitRef || github.ref }}
       ecrRepositoryName: toolbox
       dockerfilePath: images/toolbox/Dockerfile
+    permissions:
+      id-token: write
+      contents: read