assume role gh (#23)

* assume role gh * fix * refactor order * refactor * use vars * refactor
norbybaru · Aug 7, 2023 · e084710 · e084710
1 parent cd676b9
commit e084710
Showing 1 changed file with 11 additions and 5 deletions.
diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml
@@ -11,6 +11,10 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    # These permissions are needed to interact with GitHub's OIDC Token endpoint.
+    permissions:
+      id-token: write
+      contents: read
 
     strategy:
       fail-fast: false
@@ -31,6 +35,12 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v3
 
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v2
+        with:
+          role-to-assume: ${{ vars.AWS_ASSUME_ROLE }}
+          aws-region: eu-west-1
+
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
         with:
@@ -55,8 +65,4 @@ jobs:
           composer update --${{ matrix.dependency-version }} --prefer-dist --no-interaction
 
       - name: Run PHPUnit tests
-        run: vendor/bin/phpunit --testdox
-        env:
-          AWS_TIMESTREAM_KEY: ${{ secrets.AWS_TIMESTREAM_KEY }}
-          AWS_TIMESTREAM_SECRET: ${{ secrets.AWS_TIMESTREAM_SECRET }}
-          AWS_TIMESTREAM_DATABASE: laravel-aws-timestream
+        run: composer test