Skip to content

fix(docs): use concrete secrets from settings #2322

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
May 24, 2023
Merged

Conversation

sthulb
Copy link
Contributor

@sthulb sthulb commented May 24, 2023

Issue number: #2277

Summary

Changes

Please provide a summary of what's being changed

Forces GHA to use the secrets stored in the repository.

User experience

Please share what the user experience looks like before and after this change

No change

Checklist

If your change doesn't seem to apply, please leave them unchecked.

Is this a breaking change?

RFC issue number:

Checklist:

  • Migration process documented
  • Implement warnings (if it can live side by side)

Acknowledgment

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

@sthulb sthulb requested a review from a team as a code owner May 24, 2023 09:18
@sthulb sthulb requested review from leandrodamascena and removed request for a team May 24, 2023 09:18
@boring-cyborg boring-cyborg bot added the github-actions Pull requests that update Github_actions code label May 24, 2023
@pull-request-size pull-request-size bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label May 24, 2023
@github-actions github-actions bot added the bug Something isn't working label May 24, 2023
Copy link
Contributor

@heitorlessa heitorlessa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

use GitHub Environments secrets instead (encrypted vs unencrypted)

Comment on lines 8 to 14
secrets:
AWS_DOCS_ROLE_ARN:
description: Docs IAM Role
required: false
AWS_DOCS_BUCKET:
description: Docs S3 Bucket
required: false
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

use secrets: inherit instead from the caller

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In addition to this, use environment: Docs in the caller, and move the secrets into the Docs environment please. Don't leave any "Repository secrets".

Comment on lines 8 to 14
secrets:
AWS_DOCS_ROLE_ARN:
description: Docs IAM Role
required: false
AWS_DOCS_BUCKET:
description: Docs S3 Bucket
required: false
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In addition to this, use environment: Docs in the caller, and move the secrets into the Docs environment please. Don't leave any "Repository secrets".

@pull-request-size pull-request-size bot added size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels May 24, 2023
Signed-off-by: Simon Thulbourn <[email protected]>
Copy link
Contributor

@leandrodamascena leandrodamascena left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

APPROVED!

@leandrodamascena leandrodamascena merged commit a065f52 into develop May 24, 2023
@leandrodamascena leandrodamascena deleted the docs-fix branch May 24, 2023 13:59
heitorlessa added a commit to heitorlessa/aws-lambda-powertools-python that referenced this pull request May 26, 2023
* develop:
  chore(deps-dev): bump aws-cdk from 2.80.0 to 2.81.0 (aws-powertools#2332)
  chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 (aws-powertools#2326)
  chore(deps-dev): bump pytest-cov from 4.0.0 to 4.1.0 (aws-powertools#2327)
  chore(deps): bump actions/setup-python from 4.6.0 to 4.6.1 (aws-powertools#2325)
  fix(docs): use concrete secrets from settings (aws-powertools#2322)
  fix(logger): add setLevel function to set level programmatically (aws-powertools#2320)
  feat(parser): add support for parsing SQS events wrapped in Kinesis Firehose (aws-powertools#2294)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working github-actions Pull requests that update Github_actions code size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants