switch roles on condition for windows (#2975)

This commit is contained in:
Max Novich
2025-06-17 15:10:35 -07:00
committed by GitHub
parent 8efa4fde4b
commit 8483d0136c
3 changed files with 5 additions and 1 deletions

View File

@@ -26,6 +26,8 @@ on:
required: false
WINDOW_SIGNING_ROLE:
required: false
WINDOW_SIGNING_ROLE_TAG:
required: false
# Permissions required for OIDC authentication with AWS
permissions:
@@ -51,7 +53,7 @@ jobs:
if: inputs.signing && inputs.signing == true
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # ratchet:aws-actions/configure-aws-credentials@v4
with:
role-to-assume: ${{ secrets.WINDOW_SIGNING_ROLE }}
role-to-assume: ${{ startsWith(inputs.ref, 'refs/tags/') && secrets.WINDOW_SIGNING_ROLE_TAG || secrets.WINDOW_SIGNING_ROLE }}
aws-region: us-west-2
# 2) Set up Node.js

View File

@@ -96,6 +96,7 @@ jobs:
secrets:
WINDOWS_CODESIGN_CERTIFICATE: ${{ secrets.WINDOWS_CODESIGN_CERTIFICATE }}
WINDOW_SIGNING_ROLE: ${{ secrets.WINDOW_SIGNING_ROLE }}
WINDOW_SIGNING_ROLE_TAG: ${{ secrets.WINDOW_SIGNING_ROLE_TAG }}
# ------------------------------------
# 7) Create/Update GitHub Release

View File

@@ -83,6 +83,7 @@ jobs:
secrets:
WINDOWS_CODESIGN_CERTIFICATE: ${{ secrets.WINDOWS_CODESIGN_CERTIFICATE }}
WINDOW_SIGNING_ROLE: ${{ secrets.WINDOW_SIGNING_ROLE }}
WINDOW_SIGNING_ROLE_TAG: ${{ secrets.WINDOW_SIGNING_ROLE_TAG }}
# ------------------------------------
# 7) Create/Update GitHub Release