From 4ea74d0860820b5f32f54d569d9a15ff486bc351 Mon Sep 17 00:00:00 2001
From: Josh Wolf <josh@wolfs.io>
Date: Fri, 12 Dec 2025 12:23:34 -0500
Subject: [PATCH] qackage: add prod policy

---
 .github/chainguard/qackage.sts.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 .github/chainguard/qackage.sts.yaml

diff --git a/.github/chainguard/qackage.sts.yaml b/.github/chainguard/qackage.sts.yaml
new file mode 100644
index 0000000..f5eef2b
--- /dev/null
+++ b/.github/chainguard/qackage.sts.yaml
@@ -0,0 +1,11 @@
+issuer: https://accounts.google.com
+# qackage@prod-enforce-fabc.iam.gserviceaccount.com
+subject: "110452209377641458785"
+
+permissions:
+  contents: read
+  checks: write
+  pull_requests: read
+
+repositories:
+  - os