diff --git a/.github/workflows/changelog-verification.yml b/.github/workflows/changelog-verification.yml index 31f7a3e6f0f..457764177f5 100644 --- a/.github/workflows/changelog-verification.yml +++ b/.github/workflows/changelog-verification.yml @@ -1,5 +1,8 @@ name: Changelog verification +permissions: + id-token: write + on: pull_request: types: [ opened, synchronize, reopened, labeled, unlabeled ] @@ -11,16 +14,11 @@ jobs: changelog-verification: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - name: Check for changelog entry - if: ${{ !contains(github.event.pull_request.labels.*.name, 'no-changelog') }} - run: | - git fetch origin ${{ github.base_ref }} --depth 1 && \ - git diff remotes/origin/${{ github.base_ref }} --name-only | grep -P "\.changes/[0-9a-f-]+\.json" - - name: Error message - if: ${{ failure() }} - run: | - echo "::error ::No new/updated changelog entry found in /.changes directory. Please either:" - echo "::error ::* Add a changelog entry (see CONTRIBUTING.md for instructions) –or–" - echo "::error ::* Add the 'no-changelog' label to this PR (in rare cases not warranting a changelog entry)" - exit 1 + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v4 + with: + role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }} + aws-region: us-west-2 + + - name: Verify changelog + uses: awslabs/aws-kotlin-repo-tools/.github/actions/changelog-verification@main \ No newline at end of file