Skip to content

fix(ci): release bot credentials #1635

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ShubhamChaturvedi7 merged 4 commits into from
Mar 5, 2026
Merged

fix(ci): release bot credentials #1635

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
35d7e21
Allow GHA to git push
Mar 4, 2026
567a57e
fix(CI): Empty commit
Mar 4, 2026
da296ca
fix(ci): release bot credentials
Mar 5, 2026
9d0f8b1
Merge branch 'master' into release_permissions
Mar 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions .github/workflows/prod-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,28 @@ jobs:
- name: Install dependencies
run: npm ci --unsafe-perm

- name: Configure AWS Credentials for Release
uses: aws-actions/configure-aws-credentials@v5
with:
aws-region: us-west-2
role-to-assume: arn:aws:iam::587316601012:role/GitHub-CI-CI-Bot-Credential-Access-Role-us-west-2
role-session-name: CI_Bot_Release

# Use AWS Secrets Manager GHA to retrieve CI Bot Creds
- name: Get CI Bot Creds Secret
uses: aws-actions/aws-secretsmanager-get-secrets@v2
with:
secret-ids: Github/aws-crypto-tools-ci-bot
parse-json-secrets: true

# Log in as the CI Bot
- name: Log in as CI Bot
run: |
echo ${{ env.GITHUB_AWS_CRYPTO_TOOLS_CI_BOT_ESDK_RELEASE_TOKEN }} > token.txt
gh auth login --with-token < token.txt
rm token.txt
gh auth status

- name: Configure git
env:
BRANCH: ${{ github.event.inputs.branch }}
Expand Down