add id-token permission

rapidsai · Aug 22, 2023 · 5ee7d84 · 5ee7d84
1 parent 85e97c0
commit 5ee7d84
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/build-in-devcontainer.yaml b/.github/workflows/build-in-devcontainer.yaml
@@ -23,6 +23,8 @@ jobs:
         pkgr: ["conda"]
         # pkgr: ["conda", "pip"]
     runs-on: "linux-${{ matrix.arch }}-${{ inputs.node_type }}"
+    permissions:
+      id-token: write # This is required for configure-aws-credentials
     steps:
       - uses: actions/checkout@v3
         with:
@@ -43,14 +45,13 @@ jobs:
           aws-region: ${{ vars.AWS_REGION }}
           role-duration-seconds: 43200 # 12h
       - if: ${{ env.HAS_DEVCONTAINER == 'true' }}
-        name: Run make ci-build in dev container
+        name: Run build in devcontainer
         uses: devcontainers/[email protected]
         with:
           push: never
           runCmd: "${{ inputs.build_command }}"
           subFolder: ".devcontainer/cuda${{ matrix.cuda }}-${{ matrix.pkgr }}"
           env: |
-            "AWS_REGION=${{ vars.AWS_REGION }}"
             "SCCACHE_REGION=${{ vars.AWS_REGION }}"
             "AWS_ACCESS_KEY_ID=${{ env.AWS_ACCESS_KEY_ID }}"
             "AWS_SESSION_TOKEN=${{ env.AWS_SESSION_TOKEN }}"