testing devolv wrapper #7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test Devolv Action | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| jobs: | |
| test-devolv-action: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout test repo | |
| uses: actions/checkout@v3 | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ap-south-1 | |
| role-to-assume: arn:aws:iam::149704127940:role/DevolvCIRole | |
| # Removed fail-on-error (invalid input) | |
| # Added this to skip session tagging if you don't need tags | |
| role-skip-session-tagging: true | |
| - name: Debug AWS identity after AssumeRole | |
| run: aws sts get-caller-identity | |
| - name: Use Devolv Action - validate | |
| uses: devolvdev/devolv-actions@v1 | |
| with: | |
| tool: validate | |
| path: ./tests | |
| - name: Use Devolv Action - drift | |
| uses: devolvdev/devolv-actions@v1 | |
| with: | |
| tool: drift | |
| policy-name: DevolvTestPolicyHuge | |
| file: ./Devolv-source-code/test-devolv-policy.json |