Skip to content

Commit

Permalink
Unset AWS credentials to avoid overriding MinIO credentials
Browse files Browse the repository at this point in the history
Change-type: patch
Signed-off-by: Kyle Harding <[email protected]>
  • Loading branch information
klutchell committed Dec 17, 2024
1 parent 890851b commit 2d574e3
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions .github/workflows/yocto-build-deploy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -530,6 +530,13 @@ jobs:
- name: Restore sstate cache
id: sstate-restore
uses: tespkg/actions-cache/restore@cba095d7af782a955b8f4fa13396fbf0ab62bd4b # v1.7.1
# Unset AWS credentials so they don't override the minio credentials
env:
AWS_ACCESS_KEY_ID: yocto-svcacct
AWS_SECRET_ACCESS_KEY: ${{ secrets.YOCTO_CACHE_SECRET_KEY }}
AWS_SESSION_TOKEN: ''
AWS_DEFAULT_REGION: local
AWS_REGION: local
with:
endpoint: minio
port: 9000
Expand Down Expand Up @@ -595,6 +602,13 @@ jobs:
# https://0xn3va.gitbook.io/cheat-sheets/ci-cd/github/actions#cache-poisoning
# https://adnanthekhan.com/2024/05/06/the-monsters-in-your-build-cache-github-actions-cache-poisoning/
if: steps.sstate-restore.outputs.cache-hit != true && github.event_name != 'pull_request_target'
# Unset AWS credentials so they don't override the minio credentials
env:
AWS_ACCESS_KEY_ID: yocto-svcacct
AWS_SECRET_ACCESS_KEY: ${{ secrets.YOCTO_CACHE_SECRET_KEY }}
AWS_SESSION_TOKEN: ''
AWS_DEFAULT_REGION: local
AWS_REGION: local
with:
endpoint: minio
port: 9000
Expand Down

0 comments on commit 2d574e3

Please sign in to comment.