actions
/
cache
mirror of https://github.com/actions/cache.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Unset existing credentials when running from RunsOn

pull/1662/head
Cyril Rohr 2024-02-28 08:26:48 +00:00
parent 197b09d6da
commit c4c60d1f09
No known key found for this signature in database
GPG Key ID: 4F06363B8C22B3B9
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/custom/backend.ts
View File

@ -24,6 +24,16 @@ export interface ArtifactCacheEntry {
archiveLocation?: string; archiveLocation?: string;
} }
// if executing from RunsOn, unset any existing AWS env variables so that we can use the IAM instance profile for credentials
// see unsetCredentials() in https://github.com/aws-actions/configure-aws-credentials/blob/v4.0.2/src/helpers.ts#L44
if (process.env.RUNS_ON_RUNNER_NAME) {
delete process.env.AWS_ACCESS_KEY_ID;
delete process.env.AWS_SECRET_ACCESS_KEY;
delete process.env.AWS_SESSION_TOKEN;
delete process.env.AWS_REGION;
delete process.env.AWS_DEFAULT_REGION;
}
const versionSalt = "1.0"; const versionSalt = "1.0";
const bucketName = process.env.RUNS_ON_S3_BUCKET_CACHE; const bucketName = process.env.RUNS_ON_S3_BUCKET_CACHE;
const region = const region =