Skip to content

Commit

Permalink
Update permissions on action for credentials
Browse files Browse the repository at this point in the history
Signed-off-by: Kyle Squizzato <[email protected]>
  • Loading branch information
squizzi committed Aug 30, 2024
1 parent 6c9961b commit 4cff550
Showing 1 changed file with 8 additions and 1 deletion.
9 changes: 8 additions & 1 deletion .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,10 @@ concurrency:
group: test-${{ github.head_ref || github.run_id }}
cancel-in-progress: true

permissions:
id-token: write
contents: read

on:
push:
branches:
Expand Down Expand Up @@ -70,7 +74,10 @@ jobs:
with:
aws-access-key-id: ${{ secrets.CI_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.CI_AWS_SECRET_ACCESS_KEY }}
aws-region: us-west-2
aws-region: us-west-2
role-duration-seconds: 7200
role-to-assume: arn:aws:iam::688567266071:user/ci-hmc-controller
audience: sts.amazonaws.com
- name: Run E2E tests
run: |
make test-e2e
Expand Down

0 comments on commit 4cff550

Please sign in to comment.