Edit gitlab-ci.yml file

Author: sarahchen6

.gitlab-ci.yml

@@ -812,29 +812,25 @@ deploy_artifacts_to_github:
   rules:
     - if: '$POPULATE_CACHE'
       when: never
-    # - if: '$CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+$/'
-    #   when: on_success
+#    - if: '$CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+$/'
+#      when: on_success
     - when: manual # DEBUG: Allow manual trigger
       allow_failure: true
-  
-  needs: [] # DEBUG: Enforce no dependencies to run immediately
+
+  # Requires the deploy_to_maven_central job to have run first (the UP-TO-DATE gradle check across jobs is broken)
+  # This will deploy the artifacts built from the publishToSonatype task to the GitHub release
+  needs: [] # DEBUG: Enforce no dependencies for now to run immediately
 #    - job: deploy_to_maven_central
 #      # The deploy_to_maven_central job is not run for release candidate versions
 #      optional: true
 
   before_script:
     # Get a token
     - dd-octo-sts version
-    - dd-octo-sts debug --scope DataDog/dd-trace-java --policy self.gitlab.release
-#    - dd-octo-sts token --scope DataDog/dd-trace-java --policy self.gitlab.release > github-token.txt
+    - dd-octo-sts debug --scope DataDog/dd-trace-java --policy self.gitlab.release # Uncomment to debug the token
+    - dd-octo-sts token --scope DataDog/dd-trace-java --policy self.gitlab.release > github-token.txt
 
   script:
-    - aws ssm get-parameter --region us-east-1 --name ci.dd-trace-java.gh_release_token --with-decryption --query "Parameter.Value" --out text > github-token.txt
-    # Verify token was generated
-    - echo "Token file exists:" $(test -f github-token.txt && echo "YES" || echo "NO")
-    - echo "Token file size:" $(wc -c < github-token.txt) "bytes"
-    - echo "Token preview:" $(head -c 10 github-token.txt)...
-
     - gh auth login --with-token < github-token.txt
     - gh auth status  # Maybe helpful to have this output in logs?
     # - export VERSION=${CI_COMMIT_TAG##v} # remove "v" from front of tag to get version
@@ -844,9 +840,9 @@ deploy_artifacts_to_github:
     # - gh release upload --clobber --repo DataDog/dd-trace-java $CI_COMMIT_TAG workspace/dd-trace-api/build/libs/dd-trace-api-${VERSION}.jar
     # - gh release upload --clobber --repo DataDog/dd-trace-java $CI_COMMIT_TAG workspace/dd-trace-ot/build/libs/dd-trace-ot-${VERSION}.jar
 
-#  after_script:
-#    # Revoke the token after usage
-#    - dd-octo-sts revoke -t $(cat github-token.txt)
+  after_script:
+    # Revoke the token after usage
+    - dd-octo-sts revoke -t $(cat github-token.txt)
 
   retry:
     max: 2