fix: ci permissions changes

mattzcarey · Sep 12, 2023 · 7994bc8 · 7994bc8
1 parent ad50054
commit 7994bc8
Showing 1 changed file with 11 additions and 3 deletions.
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -5,9 +5,14 @@ on:
     branches: [main]
 
 permissions:
+  id-token: write
   pull-requests: write
   contents: read
 
+env:
+  CI: true
+  WS_REGION: eu-west-2
+
 jobs:
   build_and_test_code_review_gpt:
     runs-on: ubuntu-latest
@@ -70,14 +75,17 @@ jobs:
           cache: "npm"
           cache-dependency-path: '**/package-lock.json'
 
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v3
+        with:
+          aws-region: ${{ env.AWS_REGION }}
+          role-to-assume: ${{ secrets.AWS_ROLE_ARN_STAGING }}
+
       - name: 🚀 Deploy web-app
         run: npm i && npm run lint-test && npm run deploy-staging
 
   build_and_test_core:
     runs-on: ubuntu-latest
-    env:
-      CI: true
-      AWS_REGION: eu-west-2
 
     defaults:
       run: