[Sync] Push to CodeCommit #3122
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: '[Sync] Push to CodeCommit' | |
| on: | |
| schedule: | |
| # twice an hour, at :00 and :30 | |
| - cron: '0,30 * * * *' | |
| jobs: | |
| mirror: | |
| if: github.repository == 'awslabs/amazon-eks-ami' | |
| runs-on: ubuntu-latest | |
| # These permissions are needed to interact with GitHub's OIDC Token endpoint. | |
| permissions: | |
| id-token: write | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # 4.1.7 | |
| with: | |
| # fetch complete history | |
| fetch-depth: 0 | |
| - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # 4.0.2 | |
| with: | |
| aws-region: ${{ secrets.AWS_REGION }} | |
| role-to-assume: ${{ secrets.AWS_ROLE_ARN_SYNC_TO_CODECOMMIT }} | |
| - run: git config credential.helper '!aws codecommit credential-helper $@' | |
| - run: git config credential.UseHttpPath true | |
| - run: git remote add codecommit ${{ secrets.AWS_CODECOMMIT_REPO_URL }} | |
| - run: git checkout main | |
| - run: git push codecommit main |