diff --git a/.github/workflows/e2e_test.yml b/.github/workflows/e2e_test.yml index bfe0c2e3..571b391a 100644 --- a/.github/workflows/e2e_test.yml +++ b/.github/workflows/e2e_test.yml @@ -11,10 +11,11 @@ jobs: id-token: write steps: - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v3 with: role-to-assume: ${{ secrets.AWS_CODEBUILD_MAINLINE_E2E_ROLE }} aws-region: us-west-2 + mask-aws-account-id: true - name: Run CodeBuild uses: aws-actions/aws-codebuild-run-build@v1 with: diff --git a/.github/workflows/integ_test.yml b/.github/workflows/integ_test.yml index 16563aab..44131e1d 100644 --- a/.github/workflows/integ_test.yml +++ b/.github/workflows/integ_test.yml @@ -11,10 +11,11 @@ jobs: id-token: write steps: - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v3 with: role-to-assume: ${{ secrets.AWS_CODEBUILD_MAINLINE_INTEG_ROLE }} aws-region: us-west-2 + mask-aws-account-id: true - name: Run CodeBuild uses: aws-actions/aws-codebuild-run-build@v1 with: diff --git a/.github/workflows/publish_release.yml b/.github/workflows/publish_release.yml index 4d0a7b2d..f6faa1de 100644 --- a/.github/workflows/publish_release.yml +++ b/.github/workflows/publish_release.yml @@ -10,10 +10,11 @@ jobs: id-token: write steps: - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v3 with: role-to-assume: ${{ secrets.AWS_CODEBUILD_RELEASE_PUBLISH_ROLE }} aws-region: us-west-2 + mask-aws-account-id: true - name: Run CodeBuild uses: aws-actions/aws-codebuild-run-build@v1 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9989f3a8..04420721 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -72,10 +72,11 @@ jobs: with: python-version: '3.9' - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v3 with: role-to-assume: ${{ secrets.AWS_CODEARTIFACT_ROLE }} aws-region: us-west-2 + mask-aws-account-id: true - name: Install dependencies run: | CODEARTIFACT_AUTH_TOKEN=$(aws codeartifact get-authorization-token --domain ${{ secrets.CODEARTIFACT_DOMAIN }} --domain-owner ${{ secrets.CODEARTIFACT_ACCOUNT_ID }} --query authorizationToken --output text --region us-west-2) diff --git a/.github/workflows/reuse_python_build.yml b/.github/workflows/reuse_python_build.yml index 63d648f7..8d42a437 100644 --- a/.github/workflows/reuse_python_build.yml +++ b/.github/workflows/reuse_python_build.yml @@ -38,10 +38,11 @@ jobs: python-version: ${{ matrix.python-version }} - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v3 with: role-to-assume: ${{ secrets.AWS_CODEARTIFACT_ROLE }} aws-region: us-west-2 + mask-aws-account-id: true - name: Install Hatch run: |