switch roles on condition for windows (#2975)

This commit is contained in:
Max Novich
2025-06-17 15:10:35 -07:00
committed by GitHub
parent 8efa4fde4b
commit 8483d0136c
3 changed files with 5 additions and 1 deletions
+3 -1
View File
@@ -26,6 +26,8 @@ on:
required: false required: false
WINDOW_SIGNING_ROLE: WINDOW_SIGNING_ROLE:
required: false required: false
WINDOW_SIGNING_ROLE_TAG:
required: false
# Permissions required for OIDC authentication with AWS # Permissions required for OIDC authentication with AWS
permissions: permissions:
@@ -51,7 +53,7 @@ jobs:
if: inputs.signing && inputs.signing == true if: inputs.signing && inputs.signing == true
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # ratchet:aws-actions/configure-aws-credentials@v4 uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # ratchet:aws-actions/configure-aws-credentials@v4
with: with:
role-to-assume: ${{ secrets.WINDOW_SIGNING_ROLE }} role-to-assume: ${{ startsWith(inputs.ref, 'refs/tags/') && secrets.WINDOW_SIGNING_ROLE_TAG || secrets.WINDOW_SIGNING_ROLE }}
aws-region: us-west-2 aws-region: us-west-2
# 2) Set up Node.js # 2) Set up Node.js
+1
View File
@@ -96,6 +96,7 @@ jobs:
secrets: secrets:
WINDOWS_CODESIGN_CERTIFICATE: ${{ secrets.WINDOWS_CODESIGN_CERTIFICATE }} WINDOWS_CODESIGN_CERTIFICATE: ${{ secrets.WINDOWS_CODESIGN_CERTIFICATE }}
WINDOW_SIGNING_ROLE: ${{ secrets.WINDOW_SIGNING_ROLE }} WINDOW_SIGNING_ROLE: ${{ secrets.WINDOW_SIGNING_ROLE }}
WINDOW_SIGNING_ROLE_TAG: ${{ secrets.WINDOW_SIGNING_ROLE_TAG }}
# ------------------------------------ # ------------------------------------
# 7) Create/Update GitHub Release # 7) Create/Update GitHub Release
+1
View File
@@ -83,6 +83,7 @@ jobs:
secrets: secrets:
WINDOWS_CODESIGN_CERTIFICATE: ${{ secrets.WINDOWS_CODESIGN_CERTIFICATE }} WINDOWS_CODESIGN_CERTIFICATE: ${{ secrets.WINDOWS_CODESIGN_CERTIFICATE }}
WINDOW_SIGNING_ROLE: ${{ secrets.WINDOW_SIGNING_ROLE }} WINDOW_SIGNING_ROLE: ${{ secrets.WINDOW_SIGNING_ROLE }}
WINDOW_SIGNING_ROLE_TAG: ${{ secrets.WINDOW_SIGNING_ROLE_TAG }}
# ------------------------------------ # ------------------------------------
# 7) Create/Update GitHub Release # 7) Create/Update GitHub Release