diff --git a/.github/workflows/code-check-identified.yml b/.github/workflows/code-check-identified.yml index 44776f6..63af017 100644 --- a/.github/workflows/code-check-identified.yml +++ b/.github/workflows/code-check-identified.yml @@ -7,27 +7,29 @@ on: permissions: contents: read + id-token: write jobs: code-check: - runs-on: ubuntu-24.04 - environment: eu-west-2 + runs-on: [authenticated, Linux] if: "! contains(github.event.pull_request.labels.*.name, 'dependencies')" steps: - - name: 🧹 Frieza - uses: outscale/frieza-github-actions/frieza-clean@68ffd39d7e181f3548369e332242b329b04a3182 # master - with: - access_key: ${{ secrets.OSC_ACCESS_KEY }} - secret_key: ${{ secrets.OSC_SECRET_KEY }} - region: ${{ secrets.OSC_REGION }} - - name: ⬇️ Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - name: Setup toolchain - uses: ./.github/actions/setup-test - - name: 🧪 Run integration tests - env: - OSC_ACCESS_KEY: ${{ secrets.OSC_ACCESS_KEY }} - OSC_SECRET_KEY: ${{ secrets.OSC_SECRET_KEY }} - OSC_TEST_LOGIN: ${{ secrets.OSC_TEST_LOGIN }} - OSC_TEST_PASSWORD: ${{ secrets.OSC_TEST_PASSWORD }} - run: make test-int + - name: 🔒🧹 Setup Vault & Frieza + id: secrets + uses: outscale/.github/vault-frieza-clean@eb7bd1e0360703d0ad355bce46029ae8d49bac04 + with: + vault_role: outscale-osc-sdk-python + osc_account: elm + + - name: ⬇️ Checkout repository + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + + - name: Setup toolchain + uses: ./.github/actions/setup-test + + - name: 🧪 Run integration tests + env: + OSC_ACCESS_KEY: ${{ steps.secrets.outputs.access_key }} + OSC_SECRET_KEY: ${{ steps.secrets.outputs.secret_key }} + OSC_REGION: ${{ steps.secrets.outputs.region }} + run: make test-int