88 workflow_dispatch : # Allow manual triggering
99 # NOTE: This workflow can only be manually triggered from develop or main branches
1010 # The other branch will not pass the OIDC permission check
11- branches :
12- - develop # Allow manual trigger on develop branch
13- - main # Allow manual trigger on main branch
1411
1512permissions :
1613 id-token : write # Required for OIDC
@@ -313,18 +310,8 @@ jobs:
313310 echo "CI_ACCESS_ROLE_AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY" >> $GITHUB_ENV
314311 echo "CI_ACCESS_ROLE_AWS_SESSION_TOKEN=$AWS_SESSION_TOKEN" >> $GITHUB_ENV
315312
316- # Set test credentials with error handling for AWS_ACCESS_KEY_ID
317- AWS_ACCESS_KEY_ID=$(echo "$test_env_var" | jq -j ".accessKeyID" 2>/dev/null) || {
318- echo "ERROR: Failed to parse accessKeyID from JSON"
319- echo "Actual payload received:"
320- echo "==================== START PAYLOAD ===================="
321- echo "${test_env_var:0:30}"
322- echo "==================== END PAYLOAD ===================="
323- exit 1
324- }
325- echo "AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID" >> $GITHUB_ENV
326-
327- # Set remaining credentials
313+ # Set test credentials
314+ echo "AWS_ACCESS_KEY_ID=$(echo "$test_env_var" | jq -j ".accessKeyID")" >> $GITHUB_ENV
328315 echo "AWS_SECRET_ACCESS_KEY=$(echo "$test_env_var" | jq -j ".secretAccessKey")" >> $GITHUB_ENV
329316 echo "AWS_SESSION_TOKEN=$(echo "$test_env_var" | jq -j ".sessionToken")" >> $GITHUB_ENV
330317 echo "TASK_TOKEN=$(echo "$test_env_var" | jq -j ".taskToken")" >> $GITHUB_ENV
@@ -333,13 +320,6 @@ jobs:
333320 echo "AWS_KMS_KEY=$(echo "$test_env_var" | jq -j ".TestKMSKeyArn")" >> $GITHUB_ENV
334321 echo "AWS_SIGNING_PROFILE_NAME=$(echo "$test_env_var" | jq -j ".TestSigningProfileName")" >> $GITHUB_ENV
335322 echo "AWS_SIGNING_PROFILE_VERSION_ARN=$(echo "$test_env_var" | jq -j ".TestSigningProfileARN")" >> $GITHUB_ENV
336-
337- # Display first 6 characters of credentials for verification
338- ACCESS_KEY=$(echo "$test_env_var" | jq -j ".accessKeyID")
339- SECRET_KEY=$(echo "$test_env_var" | jq -j ".secretAccessKey")
340- echo "AWS_ACCESS_KEY_ID (first 6 chars): ${ACCESS_KEY:0:6}..."
341- echo "AWS_SECRET_ACCESS_KEY (first 6 chars): ${SECRET_KEY:0:6}..."
342-
343323
344324 - name : Login to Public ECR
345325 if : matrix.container_runtime != 'no-container' && env.BY_CANARY == 'true'
0 commit comments