Skip to content

Commit 012121f

Browse files
authored
ci: user service user in preperation of open sourcing (#125)
Signed-off-by: Ryan Cragun <[email protected]>
1 parent c5e22ac commit 012121f

File tree

1 file changed

+7
-10
lines changed

1 file changed

+7
-10
lines changed

.github/workflows/validate.yml

Lines changed: 7 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -17,11 +17,6 @@ on:
1717
required: true
1818
type: string
1919

20-
# These permissions are necessary for the doormat-action to function
21-
permissions:
22-
contents: read
23-
id-token: write
24-
2520
jobs:
2621
static-analysis:
2722
name: "Format"
@@ -66,12 +61,14 @@ jobs:
6661
# the terraform wrapper will break terraform execution in enos because
6762
# it changes the output to text when we expect it to be JSON.
6863
terraform_wrapper: false
69-
- uses: hashicorp/doormat-action@v1
64+
- uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
7065
with:
71-
# This role, the associated policy, the workflow event types, and the
72-
# the allowed git refs are managed via the Terraform in the
73-
# hashicorp/enos-ci repository.
74-
aws-role-arn: arn:aws:iam::147451547303:role/enos
66+
# The github actions service user creds for this account managed in hashicorp/enos-ci
67+
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
68+
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
69+
aws-region: "us-east-1"
70+
role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
71+
role-skip-session-tagging: true
7572
- name: Setup Enos SSH Keys
7673
id: sshkey
7774
run: |

0 commit comments

Comments
 (0)