fix(gcs): Only request read-only access
We accidentally switched to requesting a read-write scope for all
buckets symbolicator tries to access and customers might not have
given our tokens those permissions, resulting in us not being able to
use their symbol source.
@@ -80,7 +80,7 @@ fn get_auth_jwt(source_key: &GcsSourceKey, expiration: i64) -> Result<String, Gc
let jwt_claims = JwtClaims {
issuer: source_key.client_email.clone(),
- scope: "https://www.googleapis.com/auth/devstorage.read_write".into(),
+ scope: "https://www.googleapis.com/auth/devstorage.read_only".into(),
audience: "https://www.googleapis.com/oauth2/v4/token".into(),
expiration,
issued_at: Utc::now().timestamp(),
