Fix aws auth

moonswitch · Mar 30, 2024 · e037fb3 · e037fb3
1 parent 28071b0
commit e037fb3
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.github/workflows/ecr-public.yml b/.github/workflows/ecr-public.yml
@@ -48,6 +48,7 @@
         permissions:
           contents: read
           packages: write
+          id-token: write
         env:
           CONTAINER_REPOSITORY: moonswitch/${{ matrix.image }}
         steps:
@@ -56,6 +57,17 @@
 
           - name: Set up Docker Buildx
             uses: docker/setup-buildx-action@v3
+
+          - name: Configure AWS credentials
+            uses: aws-actions/configure-aws-credentials@v4
+            with:
+              aws-region: ${{ secrets.AWS_REGION }}
+              role-to-assume: ${{ secrets.AWS_IAM_ROLE_ARN }}
+
+          - name: Login to Public ECR
+            uses: docker/login-action@v3
+            with:
+              registry: ${{ env.CONTAINER_REGISTRY }}
 
           - name: Extract metadata (tags, labels) for Docker
             id: meta
@@ -121,6 +133,7 @@
           - build
         permissions:
           contents: read
+          id-token: write
         env:
           CONTAINER_REPOSITORY: moonswitch/${{ matrix.image }}
         steps: