cdklabs / cdklabs/cdk-pipelines-github
AwsCredentials.fromGitHubSecrets is not working
- Dominant language
- TypeScript
- Stars
- 384
- Forks
- 45
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 4
Description
I've created a simple pipeline with a single stage and included a stack that required some assets to be upload.
The Publish Assets step has failed with the following error:
```
npx cdk-assets --path cdk.out/assembly-DEV/DEVgithubtestComplianceLogBucketStackF5F521E7.assets.json --verbose publish 0af827d6ad193f718e61cfbca3d058c1ef178607ee4fed500290c42de72be137:218461131457-eu-central-1
verbose: Loaded manifest from cdk.out/assembly-DEV/DEVgithubtestComplianceLogBucketStackF5F521E7.assets.json: 3 assets found
verbose: Applied selection: 1 assets selected.
info : [0%] start: Publishing 0af827d6ad193f718e61cfbca3d058c1ef178607ee4fed500290c42de72be137:21846[11](https://github.com/gyalai-aws/github-cicd-wrapper/actions/runs/11013717640/job/30582803734#step:5:12)31457-eu-central-1
verbose: [0%] check: Check s3://cdk-hnb659fds-assets-218461131457-eu-central-1/0af827d6ad193f718e61cfbca3d058c1ef178607ee4fed500290c42de72be137.json
error : [100%] fail: Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1
Failure: CredentialsError: Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1
at Request.extractError (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/protocol/query.js:50:29)
at Request.callListeners (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/sequential_executor.js:106:20)
at Request.emit (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/sequential_executor.js:78:10)
at Request.emit (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:686:14)
at Request.transition (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:22:10)
at AcceptorStateMachine.runTo (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/state_machine.js:14:[12](https://github.com/gyalai-aws/github-cicd-wrapper/actions/runs/11013717640/job/30582803734#step:5:13))
at /home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/state_machine.js:26:10
at Request. (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:38:9)
at Request. (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:688:12)
at Request.callListeners (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/sequential_executor.js:1[16](https://github.com/gyalai-aws/github-cicd-wrapper/actions/runs/11013717640/job/30582803734#step:5:17):18)
```
The secrets are configured properly, and when I'm replaced the `cdk-assets publish` command with the `aws sts get-caller-identity` I've recieved the correct AWS identity.
Contributor guide
Assessment
This issue has not been assessed yet.