chown

Flagsmith · Jun 24, 2024 · d5162f9 · d5162f9
1 parent 9906aff
commit d5162f9
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.github/workflows/api-deploy-staging-ecs.yml b/.github/workflows/api-deploy-staging-ecs.yml
@@ -8,6 +8,7 @@ on:
       - api/**
       - .github/**
       - infrastructure/aws/staging/**
+      - fix/ecs-deploy-secrets
   workflow_dispatch:
 
 jobs:

diff --git a/Dockerfile b/Dockerfile
@@ -167,7 +167,8 @@ FROM api-runtime-private as saas-api
 RUN --mount=type=secret,id=sse_pgp_pkey \
   apt-get update && apt-get install -y gnupg && \
   gpg --import /run/secrets/sse_pgp_pkey && \
-  mv /root/.gnupg/ /app/
+  mv /root/.gnupg/ /app/ && \
+  chown -R nobody /app/.gnupg/
 
 ARG PYTHON_SITE_DIR
 COPY --from=build-python-private ${PYTHON_SITE_DIR} ${PYTHON_SITE_DIR}