|
1 | | -name: 'Agent Zip Build' |
| 1 | +name: Agent Zip Build |
2 | 2 | on: |
3 | 3 | workflow_dispatch: |
4 | 4 | inputs: |
5 | 5 | buildType: |
6 | 6 | type: choice |
7 | | - description: 'Build Type' |
| 7 | + description: "Build Type" |
8 | 8 | required: true |
9 | | - options: |
| 9 | + options: |
10 | 10 | - Testing |
11 | 11 | - Release |
12 | 12 | buildVersion: |
13 | | - description: 'Build Version' |
| 13 | + description: "Build Version" |
14 | 14 | required: true |
| 15 | + |
| 16 | +permissions: |
| 17 | + id-token: write |
| 18 | + contents: write |
| 19 | + |
15 | 20 | jobs: |
16 | 21 | Build: |
17 | 22 | runs-on: ubuntu-latest |
18 | 23 | steps: |
19 | 24 | - uses: actions/checkout@v3 |
20 | | - - uses: actions/setup-java@v3 |
| 25 | + |
| 26 | + - uses: actions/setup-java@v4 |
21 | 27 | with: |
22 | | - distribution: 'zulu' |
23 | | - java-version: '11' |
| 28 | + distribution: "zulu" |
| 29 | + java-version: "11" |
| 30 | + |
| 31 | + - name: Set AWS environment |
| 32 | + run: | |
| 33 | + echo "AWS_DEFAULT_REGION=us-east-1" >> $GITHUB_ENV |
| 34 | + echo "AWS_DEFAULT_OUTPUT=json" >> $GITHUB_ENV |
| 35 | + echo "AWS_ROLE_ARN=${{ secrets.STAGE_AWS_GITHUB_OIDC_ROLE_ARN }}" >> $GITHUB_ENV |
| 36 | +
|
| 37 | + - name: Configure AWS credentials (OIDC) |
| 38 | + uses: aws-actions/configure-aws-credentials@v4 |
| 39 | + with: |
| 40 | + role-to-assume: ${{ env.AWS_ROLE_ARN }} |
| 41 | + role-session-name: GitHub_to_AWS_via_FederatedOIDC |
| 42 | + aws-region: ${{ env.AWS_DEFAULT_REGION }} |
| 43 | + |
24 | 44 | - name: Downloading Packages |
25 | 45 | run: | |
26 | | - mkdir $HOME/.testsigma_os |
| 46 | + mkdir -p $HOME/.testsigma_os |
27 | 47 | aws s3 cp s3://hybrid-staging.testsigma.com/testsigma_os $HOME/.testsigma_os --recursive |
28 | | - env: |
29 | | - AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} |
30 | | - AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} |
31 | | - AWS_DEFAULT_REGION: 'us-east-1' |
32 | | - AWS_DEFAULT_OUTPUT: json |
33 | | - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} |
34 | | - - name: Building |
| 48 | +
|
| 49 | + - name: Building |
35 | 50 | run: | |
36 | 51 | if [[ "${{ github.event.inputs.buildType }}" == "Testing" ]]; then |
37 | 52 | bash agent/scripts/build.sh --VERSION=v${{ github.event.inputs.buildVersion }} --PUBLISH_TO_GIT=false |
|
40 | 55 | bash agent/scripts/build.sh --VERSION=v${{ github.event.inputs.buildVersion }} --PUBLISH_TO_GIT=true |
41 | 56 | fi |
42 | 57 | env: |
43 | | - AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} |
44 | | - AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} |
45 | | - AWS_DEFAULT_REGION: 'us-east-1' |
46 | | - AWS_DEFAULT_OUTPUT: json |
47 | | - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} |
| 58 | + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |
| 59 | + |
0 commit comments