We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent eb8a1ed commit eec432eCopy full SHA for eec432e
1 file changed
infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
@@ -981,6 +981,14 @@ data "aws_iam_policy_document" "regression_repo_assume_role" {
981
values = ["repo:${var.github_org}/${var.regression_repo}:*"]
982
}
983
984
+ condition {
985
+ test = "StringLike"
986
+ variable = "token.actions.githubusercontent.com:job_workflow_ref"
987
+ values = [
988
+ "${var.github_org}/${var.regression_repo}/.github/workflows/regression_tests.yml@*"
989
+ ]
990
+ }
991
+
992
condition {
993
test = "StringEquals"
994
variable = "token.actions.githubusercontent.com:aud"
0 commit comments