From 2a589b79047a2431dd443d50c434e7f4767eab51 Mon Sep 17 00:00:00 2001 From: Dario Nieuwenhuis Date: Thu, 25 May 2023 03:43:44 +0200 Subject: ci: replace openid connect with static secret. The oidc token is only valid for 5min, builds are starting to fail because HIL tests take more than 5 min and we only obtain it once at start. Instead of fixing it, let's remove it. My hope for OIDC was to allow running HIL tests on PRs from forks if the author is in a list of trusted users. However GHA simply doesn't give the ID token to PRs from forks. :shrug: Same limitation as with static tokens. So it's useless complexity, let's kill it. --- .github/workflows/rust.yml | 2 ++ 1 file changed, 2 insertions(+) (limited to '.github/workflows') diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml index 47dc8fd7a..0cbca31b8 100644 --- a/.github/workflows/rust.yml +++ b/.github/workflows/rust.yml @@ -36,6 +36,8 @@ jobs: target_ci key: rust3-${{ runner.os }}-${{ hashFiles('rust-toolchain.toml') }} - name: build + env: + TELEPROBE_TOKEN: ${{ secrets.TELEPROBE_TOKEN }} run: | curl -L -o /usr/local/bin/cargo-batch https://github.com/embassy-rs/cargo-batch/releases/download/batch-0.3.0/cargo-batch chmod +x /usr/local/bin/cargo-batch -- cgit