Merge pull request #173 from guardian/ash/actions-v4

Bump `actions-riff-raff` to V4

.github/workflows/ci.yml

@@ -13,22 +13,15 @@ jobs:
     runs-on: ubuntu-latest
     # See https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token
     permissions:
-      # required by aws-actions/configure-aws-credentials
+      # required by actions-riff-raff@v4
       id-token: write
       contents: read
+      pull-requests: write
 
     steps:
       - name: Checkout repo
         uses: actions/checkout@v3
 
-      # Setup AWS credentials to enable uploading to S3 for Riff-Raff.
-      # See https://github.com/aws-actions/configure-aws-credentials
-      - name: Setup aws credentials
-        uses: aws-actions/configure-aws-credentials@v2
-        with:
-          role-to-assume: ${{ secrets.GU_RIFF_RAFF_ROLE_ARN }}
-          aws-region: eu-west-1
-
       # Configuring caching is also recommended.
       # See https://github.com/actions/setup-java
       - name: Setup Java 11
@@ -43,9 +36,11 @@ jobs:
             ./script/ci
           
       - name: Upload to riff-raff
-        uses: guardian/actions-riff-raff@v2
+        uses: guardian/actions-riff-raff@v4
         with:
           app: anghammarad
+          roleArn: ${{ secrets.GU_RIFF_RAFF_ROLE_ARN }}
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
           configPath: anghammarad/riff-raff.yaml
           projectName: tools::anghammarad
           buildNumberOffset: 250