We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 5e0bbf2 commit e8c54b9Copy full SHA for e8c54b9
1 file changed
.github/workflows/build-pkg.yaml
@@ -73,6 +73,11 @@ jobs:
73
role-to-assume: ${{ secrets.ROLE }}
74
role-session-name: dependency-upload-session
75
aws-region: ${{ secrets.REGION }}
76
+ # The default OIDC token duration is 1 hour (3600s). The "generate pkg" step
77
+ # can take over 1 hour when the external code signing service is slow,
78
+ # causing AWS CLI calls to fail with expired credentials.
79
+ # Setting to 2 hours (7200s) to provide sufficient buffer.
80
+ role-duration-seconds: 7200
81
82
- id: final
83
name: generate pkg
0 commit comments