diff --git a/.github/workflows/post_release_version_bump.yml b/.github/workflows/post_release_version_bump.yml index cc09424..663c7c7 100644 --- a/.github/workflows/post_release_version_bump.yml +++ b/.github/workflows/post_release_version_bump.yml @@ -58,7 +58,7 @@ jobs: runs-on: ubuntu-latest needs: check-version steps: - - name: Configure AWS credentials for PyPI secrets + - name: Configure AWS credentials for BOT secrets uses: aws-actions/configure-aws-credentials@v4 with: role-to-assume: ${{ secrets.AWS_ROLE_ARN_PYPI_RELEASE }} diff --git a/.github/workflows/pre_release_prepare.yml b/.github/workflows/pre_release_prepare.yml index 426a911..c00a03f 100644 --- a/.github/workflows/pre_release_prepare.yml +++ b/.github/workflows/pre_release_prepare.yml @@ -11,19 +11,38 @@ on: required: true default: 'false' +env: + AWS_DEFAULT_REGION: us-east-1 + permissions: contents: write pull-requests: write + id-token: write jobs: update-version-and-create-pr: runs-on: ubuntu-latest steps: + - name: Configure AWS credentials for BOT secrets + uses: aws-actions/configure-aws-credentials@v4 + with: + role-to-assume: ${{ secrets.AWS_ROLE_ARN_PYPI_RELEASE }} + aws-region: ${{ env.AWS_DEFAULT_REGION }} + + - name: Get Bot secrets + uses: aws-actions/aws-secretsmanager-get-secrets@v1 + id: bot_secrets + with: + secret-ids: | + BOT_TOKEN ,${{ secrets.BOT_TOKEN_SECRET_ARN }} + parse-json-secrets: true + - name: Checkout main branch uses: actions/checkout@v3 with: ref: 'main' + token: ${{ env.BOT_TOKEN_GITHUB_RW_PATOKEN }} - name: Setup Git run: |