Skip to content

Commit

Permalink
Update permissions on action for credentials
Browse files Browse the repository at this point in the history
Signed-off-by: Kyle Squizzato <[email protected]>
  • Loading branch information
squizzi committed Aug 30, 2024
1 parent 6c9961b commit dfe298a
Showing 1 changed file with 9 additions and 1 deletion.
10 changes: 9 additions & 1 deletion .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,10 @@ concurrency:
group: test-${{ github.head_ref || github.run_id }}
cancel-in-progress: true

permissions:
id-token: write
contents: write

on:
push:
branches:
Expand Down Expand Up @@ -56,6 +60,9 @@ jobs:
name: E2E Tests
runs-on: ubuntu-latest
needs: build
secrets:
CI_AWS_ACCESS_KEY_ID: { required: true }
CI_AWS_SECRET_ACCESS_KEY: { required: true }
steps:
- name: Checkout repository
uses: actions/checkout@v4
Expand All @@ -70,7 +77,8 @@ jobs:
with:
aws-access-key-id: ${{ secrets.CI_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.CI_AWS_SECRET_ACCESS_KEY }}
aws-region: us-west-2
aws-region: us-west-2
audience: sts.amazonaws.com
- name: Run E2E tests
run: |
make test-e2e
Expand Down

0 comments on commit dfe298a

Please sign in to comment.