Skip to content

Potential fix for code scanning alert no. 8: Workflow does not contai… #3059

Potential fix for code scanning alert no. 8: Workflow does not contai…

Potential fix for code scanning alert no. 8: Workflow does not contai… #3059

Workflow file for this run

name: Continuous Integration Workflow
permissions:
contents: read
on:
pull_request:
push:
# This workflow runs every weekday at 15:00 UTC (8AM PDT)
schedule:
- cron: '00 15 * * 1-5'
jobs:
Static_Analysis:

Check failure on line 14 in .github/workflows/ci-workflow.yml

View workflow run for this annotation

GitHub Actions / Continuous Integration Workflow

Invalid workflow file

The workflow is not valid. .github/workflows/ci-workflow.yml (Line: 14, Col: 3): Error calling workflow 'aws/amazon-s3-encryption-client-java/.github/workflows/static-analysis.yml@11d643e403597b69a855400bbb249da3b750fc57'. The nested job 'SpotBugs' is requesting 'id-token: write', but is only allowed 'id-token: none'.
uses: ./.github/workflows/static-analysis.yml
Build:
strategy:
fail-fast: false # TODO: Set to true once CI is stable
matrix:
version: [ 8, 11, 17 ]
distribution: [ corretto, temurin ] # TODO: Add OpenJDK
uses: ./.github/workflows/build.yml
secrets: inherit
with:
version: ${{ matrix.version }}
distribution: ${{ matrix.distribution }}
Examples:
uses: ./.github/workflows/examples.yml
secrets: inherit
with:
version: 17
distribution: corretto
notify:
needs:
[
Static_Analysis,
Build,
Examples,
]
if: ${{ failure() && github.event_name == 'schedule' }}
uses: aws/aws-cryptographic-material-providers-library/.github/workflows/slack-notification.yml@main
with:
message: "Daily CI failed on `${{ github.repository }}`. View run: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
secrets:
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL_CI }}