将 Github 操作与 codebuild 结合使用

Question

我正在将 GitHub Actions 与 CodeBuild 一起使用，但每当我运行工作流时，我都会收到错误消息： 开始代码构建

[24](https://github.com/jude 0143143/CodeBuild/runs/3692850080?check_suite_focus=true#step:4:24)错误：请求中包含的安全令牌无效

名称：“CodeBuild 的 GitHub 操作” 上： 拉取请求： 分支机构： - 测试 环境： tf_version: '最新的' tg_version: '最新的' 工作： 部署： 名称：“构建和部署” 运行：ubuntu-latest

steps:
  - name: 'checkout'
    uses: actions/checkout@v2

  - name: configure AWS credentials
    uses: aws-actions/configure-aws-credentials@v1
    with:
      aws-access-key-id: ${{secrets.AWS_ACCESS_KEY_ID}}
      aws-secret-access-key: ${{secrets.AWS_SECRET_ACCESS_KEY }}
      aws-region: us-east-1
      role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
      role-duration-seconds: 3600

  - name: Run CodeBuild
    uses: aws-actions/aws-codebuild-run-build@v1
    with:
      project-name: CodeBuild
      buildspec-override: stage/dev-env/buildspec.yml
      env-vars-for-codebuild: |
        TF_INPUT,
        AWS_ACCESS_KEY_ID,
        AWS_SECRET_ACCESS_KEY,
        AWS_REGION,
        ROLE_TO_ASSUME,
        ROLE_DURATION_SECONDS,
     
    env:
      TF_INPUT: false 
      AWS_ACCESS_KEY_ID: ${{secrets.AWS_ACCESS_KEY_ID}}
      AWS_SECRET_ACCESS_KEY: ${{secrets.AWS_SECRET_ACCESS_KEY }}
      AWS_REGION: us-east-1
      ROLE_TO_ASSUME: ${{ secrets.AWS_ROLE_TO_ASSUME }}
      ROLE_DURATION_SECONDS: 3600[![enter image description here][1]][1]

Answer 1

错误消息表明给定的角色或键对执行操作无效。

您在“配置 AWS 凭证”和“运行 CodeBuild”步骤中都设置了访问密钥和秘密密钥。查看“aws-actions/aws-codebuild-run-build@v1”的存储库，它似乎只需要在第一步中进行配置。不确定您希望部署到多少个环境，但如果只有一个，那么 env 是多余的。

https://github.com/aws-actions/aws-codebuild-run-build

我期待这样的想法：

steps:
  - name: 'checkout'
    uses: actions/checkout@v2

  - name: configure AWS credentials
    uses: aws-actions/configure-aws-credentials@v1
    with:
      aws-access-key-id: ${{secrets.AWS_ACCESS_KEY_ID}}
      aws-secret-access-key: ${{secrets.AWS_SECRET_ACCESS_KEY }}
      aws-region: us-east-1
      role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
      role-duration-seconds: 3600

  - name: Run CodeBuild
    uses: aws-actions/aws-codebuild-run-build@v1
    with:
      project-name: CodeBuild
      buildspec-override: stage/dev-env/buildspec.yml