Skip to content

Commit 22d47d6

Browse files
fix: token rotation (#119)
1 parent ce998bc commit 22d47d6

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

.github/workflows/reusable-build-test-release.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -670,6 +670,7 @@ jobs:
670670
sc4s-docker-registry: ${{ matrix.sc4s.docker_registry }}
671671
- name: Read secrets from AWS Secrets Manager again into environment variables in case credential rotation
672672
id: update-argo-token
673+
if: always()
673674
run: |
674675
ARGO_TOKEN=$(aws secretsmanager get-secret-value --secret-id ta-github-workflow-automation-token | jq -r '.SecretString')
675676
echo "::set-output name=argo-token::$ARGO_TOKEN"
@@ -1001,6 +1002,7 @@ jobs:
10011002
sc4s-version: "No"
10021003
- name: Read secrets from AWS Secrets Manager again into environment variables in case credential rotation
10031004
id: update-argo-token
1005+
if: always()
10041006
run: |
10051007
ARGO_TOKEN=$(aws secretsmanager get-secret-value --secret-id ta-github-workflow-automation-token | jq -r '.SecretString')
10061008
echo "::set-output name=argo-token::$ARGO_TOKEN"
@@ -1176,6 +1178,7 @@ jobs:
11761178
sc4s-version: "No"
11771179
- name: Read secrets from AWS Secrets Manager again into environment variables in case credential rotation
11781180
id: update-argo-token
1181+
if: always()
11791182
run: |
11801183
ARGO_TOKEN=$(aws secretsmanager get-secret-value --secret-id ta-github-workflow-automation-token | jq -r '.SecretString')
11811184
echo "::set-output name=argo-token::$ARGO_TOKEN"

0 commit comments

Comments
 (0)