Skip to content

Can’t configure credentials with GitHub App #1257

@slocoro

Description

@slocoro

Describe the bug

I have a python script that triggers a Github Actions workflow using a Github App installation. The triggered workflow fails with the following message when trying to configure AWS credentials:

Error: Could not assume role with web identity token file: Unable to validate tags

Weirdly, when I use a PAT instead of the Github App installation I'm able to configure the credentials.

Found this similar looking issue #930 but wasn't able to solve my problem.

Any help will be greatly appreciated :)

Regression Issue

  • Select this option if this issue appears to be a regression.

Expected Behavior

The action is able to configure the credentials without failing.

Current Behavior

The action fails with this error:

Error: Could not assume role with web identity token file: Unable to validate tags

Reproduction Steps

Use a Github App installation to trigger the workflow using Github's create workflow dispatch API

on:
  workflow_dispatch:

permissions:
  contents: read
  id-token: write

jobs:
    steps:
      - name: Configure AWS credentials
        uses: github-actions/configure-aws-credentials@v4
        with:
          aws-region: <my-region>
          role-to-assume: <my-role>
          role-session-name: <my-session-name>

Possible Solution

No response

Additional Information/Context

No response

Activity

added
bugSomething isn't working
needs-triageThis issue still needs to be triaged
on Jan 17, 2025
changed the title [-]short issue description[/-] [+]Can’t configure credentials with GitHub App[/+] on Jan 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingneeds-triageThis issue still needs to be triaged

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      No branches or pull requests

        Participants

        @slocoro

        Issue actions

          Can’t configure credentials with GitHub App · Issue #1257 · aws-actions/configure-aws-credentials