Skip to content

Commit d98fb62

Browse files
committed
fix: hardcode role ARNs to fix workflow_call secrets issue
Secrets context is not available in `with:` inputs for reusable workflows. Hardcode role ARNs since they're not sensitive (just identifiers - actual auth happens via OIDC). - ConfigTests: arn:aws:iam::677276116620:role/cloud-nuke-gha - Sandbox: arn:aws:iam::738755648600:role/cloud-nuke-gha
1 parent 757dc3a commit d98fb62

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

.github/workflows/nuke.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
uses: ./.github/workflows/nuke-account.yml
5050
with:
5151
account_name: ConfigTests
52-
role_arn: ${{ secrets.CONFIGTESTS_ROLE_ARN }}
52+
role_arn: arn:aws:iam::677276116620:role/cloud-nuke-gha
5353
older_than: 2h
5454
extra_excludes: --exclude-resource-type internet-gateway
5555
secrets: inherit
@@ -64,7 +64,7 @@ jobs:
6464
uses: ./.github/workflows/nuke-account.yml
6565
with:
6666
account_name: Sandbox
67-
role_arn: ${{ secrets.SANDBOX_ROLE_ARN }}
67+
role_arn: arn:aws:iam::738755648600:role/cloud-nuke-gha
6868
older_than: 24h
6969
extra_excludes: --exclude-resource-type eip
7070
secrets: inherit

0 commit comments

Comments
 (0)