Skip to content

chore(workflows): migrate git-sync SSH key from GitHub secret to Secrets Manager via OIDC#7978

Open
siddsriv wants to merge 1 commit intomainfrom
chore/git-sync-oidc-change
Open

chore(workflows): migrate git-sync SSH key from GitHub secret to Secrets Manager via OIDC#7978
siddsriv wants to merge 1 commit intomainfrom
chore/git-sync-oidc-change

Conversation

@siddsriv
Copy link
Copy Markdown
Collaborator

@siddsriv siddsriv commented Apr 29, 2026

Issue

Internal JS-6698

Description

Migrates the git-sync workflow from using a GitHub repo secret (GIT_SYNC_SSH_PRIVATE_KEY) to fetching the SSH key at runtime from Secrets Manager via OIDC role assumption.

Checklist

  • If the PR is a feature, add integration tests (*.integ.spec.ts) or E2E tests.
    • It's not a feature.
  • My E2E tests are resilient to concurrent i/o.
    • I didn't write any E2E tests.
  • I added access level annotations e.g. @public, @internal tags and enabled doc generation on the package. Remember that access level annotations go below the description, not above.
    • I didn't add any public functions.
  • Streams - how do they work?? My WebStream readers/locks are properly lifecycled. Node.js stream backpressure is handled. Error handling.
    • No streams here.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@siddsriv siddsriv requested a review from a team as a code owner April 29, 2026 21:58
@siddsriv siddsriv force-pushed the chore/git-sync-oidc-change branch 2 times, most recently from 96992f0 to 34a4dcb Compare April 29, 2026 22:03
@siddsriv siddsriv force-pushed the chore/git-sync-oidc-change branch from 34a4dcb to 52d74fa Compare April 29, 2026 22:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant