switch roles on condition for windows (#2975)
This commit is contained in:
@@ -26,6 +26,8 @@ on:
|
|||||||
required: false
|
required: false
|
||||||
WINDOW_SIGNING_ROLE:
|
WINDOW_SIGNING_ROLE:
|
||||||
required: false
|
required: false
|
||||||
|
WINDOW_SIGNING_ROLE_TAG:
|
||||||
|
required: false
|
||||||
|
|
||||||
# Permissions required for OIDC authentication with AWS
|
# Permissions required for OIDC authentication with AWS
|
||||||
permissions:
|
permissions:
|
||||||
@@ -51,7 +53,7 @@ jobs:
|
|||||||
if: inputs.signing && inputs.signing == true
|
if: inputs.signing && inputs.signing == true
|
||||||
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # ratchet:aws-actions/configure-aws-credentials@v4
|
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # ratchet:aws-actions/configure-aws-credentials@v4
|
||||||
with:
|
with:
|
||||||
role-to-assume: ${{ secrets.WINDOW_SIGNING_ROLE }}
|
role-to-assume: ${{ startsWith(inputs.ref, 'refs/tags/') && secrets.WINDOW_SIGNING_ROLE_TAG || secrets.WINDOW_SIGNING_ROLE }}
|
||||||
aws-region: us-west-2
|
aws-region: us-west-2
|
||||||
|
|
||||||
# 2) Set up Node.js
|
# 2) Set up Node.js
|
||||||
|
|||||||
@@ -96,6 +96,7 @@ jobs:
|
|||||||
secrets:
|
secrets:
|
||||||
WINDOWS_CODESIGN_CERTIFICATE: ${{ secrets.WINDOWS_CODESIGN_CERTIFICATE }}
|
WINDOWS_CODESIGN_CERTIFICATE: ${{ secrets.WINDOWS_CODESIGN_CERTIFICATE }}
|
||||||
WINDOW_SIGNING_ROLE: ${{ secrets.WINDOW_SIGNING_ROLE }}
|
WINDOW_SIGNING_ROLE: ${{ secrets.WINDOW_SIGNING_ROLE }}
|
||||||
|
WINDOW_SIGNING_ROLE_TAG: ${{ secrets.WINDOW_SIGNING_ROLE_TAG }}
|
||||||
|
|
||||||
# ------------------------------------
|
# ------------------------------------
|
||||||
# 7) Create/Update GitHub Release
|
# 7) Create/Update GitHub Release
|
||||||
|
|||||||
@@ -83,6 +83,7 @@ jobs:
|
|||||||
secrets:
|
secrets:
|
||||||
WINDOWS_CODESIGN_CERTIFICATE: ${{ secrets.WINDOWS_CODESIGN_CERTIFICATE }}
|
WINDOWS_CODESIGN_CERTIFICATE: ${{ secrets.WINDOWS_CODESIGN_CERTIFICATE }}
|
||||||
WINDOW_SIGNING_ROLE: ${{ secrets.WINDOW_SIGNING_ROLE }}
|
WINDOW_SIGNING_ROLE: ${{ secrets.WINDOW_SIGNING_ROLE }}
|
||||||
|
WINDOW_SIGNING_ROLE_TAG: ${{ secrets.WINDOW_SIGNING_ROLE_TAG }}
|
||||||
|
|
||||||
# ------------------------------------
|
# ------------------------------------
|
||||||
# 7) Create/Update GitHub Release
|
# 7) Create/Update GitHub Release
|
||||||
|
|||||||
Reference in New Issue
Block a user