From bb1e48aefce941697e1792df2bcf0b92b3d24b97 Mon Sep 17 00:00:00 2001
From: Jacob Duijzer <jacob@duijzer.com>
Date: Wed, 24 Sep 2025 08:01:26 +0200
Subject: [PATCH] Update infra-as-code.yml

---
 .github/workflows/infra-as-code.yml | 31 +++++++++++++++++++----------
 1 file changed, 21 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/infra-as-code.yml b/.github/workflows/infra-as-code.yml
index ce3438b..e297a3b 100644
--- a/.github/workflows/infra-as-code.yml
+++ b/.github/workflows/infra-as-code.yml
@@ -8,6 +8,10 @@ on:
       - "infra/**"
   workflow_dispatch:
 
+permissions:
+  id-token: write
+  contents: read
+
 env:
   RESOURCE_GROUP: rg-quickscan
   LOCATION: westeurope
@@ -21,17 +25,24 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
-
-      - name: Log in to Azure
-        uses: azure/login@v1
+      
+      - name: Azure login
+        uses: azure/login@v2
         with:
-          creds: >
-            {
-              "clientId": "${{ secrets.AZURE_CLIENT_ID }}",
-              "clientSecret": "${{ secrets.AZURE_CLIENT_SECRET }}",
-              "subscriptionId": "${{ secrets.AZURE_SUBSCRIPTION_ID }}",
-              "tenantId": "${{ secrets.AZURE_TENANT_ID }}"
-            }
+          client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+
+      # - name: Log in to Azure
+      #   uses: azure/login@v1
+      #   with:
+      #     creds: >
+      #       {
+      #         "clientId": "${{ secrets.AZURE_CLIENT_ID }}",
+      #         "clientSecret": "${{ secrets.AZURE_CLIENT_SECRET }}",
+      #         "subscriptionId": "${{ secrets.AZURE_SUBSCRIPTION_ID }}",
+      #         "tenantId": "${{ secrets.AZURE_TENANT_ID }}"
+      #       }
 
       - name: Create resource group if it doesn't exist
         run: |