Skip to content

Conversation

@samjewell
Copy link

Add a reusable GitHub Actions workflow to sync repository contents to an S3 bucket, supporting OIDC and IAM authentication.


Open in Cursor Open in Web

This commit introduces a reusable GitHub Actions workflow that synchronizes repository contents to an S3 bucket. It supports both OIDC and IAM credential authentication, and offers various configuration options for source directory, destination prefix, deletion, exclusion patterns, and more. An example workflow demonstrating its usage is also included.

Co-authored-by: sam.jewell <[email protected]>
@cursor
Copy link

cursor bot commented Dec 11, 2025

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
Learn more about Cursor Agents

@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.


- name: Configure AWS credentials (OIDC)
if: ${{ inputs.aws-role-arn != '' }}
uses: aws-actions/configure-aws-credentials@v4

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference

- name: Configure AWS credentials (IAM)
if: ${{ inputs.aws-role-arn == '' }}
uses: aws-actions/configure-aws-credentials@v4

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference
@github-actions
Copy link

😢 zizmor failed with exit code 14.

Expand for full output
error[unpinned-uses]: unpinned action reference
   --> ./.github/workflows/sync-repo-to-s3.yml:224:9
    |
224 |         uses: aws-actions/configure-aws-credentials@v4
    |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
    |
    = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
   --> ./.github/workflows/sync-repo-to-s3.yml:233:9
    |
233 |         uses: aws-actions/configure-aws-credentials@v4
    |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
    |
    = note: audit confidence → High

161 findings (15 ignored, 144 suppressed): 0 informational, 0 low, 0 medium, 2 high

@grafana-plugins-platform-bot grafana-plugins-platform-bot bot moved this from 📬 Triage to 🔬 In review in Plugins Platform / Grafana Community Dec 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: 🔬 In review

Development

Successfully merging this pull request may close these issues.

3 participants