Explicitly set the GitHub Actions thumbprint to resolve #2343. Update…

…d the AWS CDK as well. (#2345) Signed-off-by: David Venable <[email protected]>
opensearch-project · Mar 1, 2023 · 46d08cb · 46d08cb
1 parent 10c4e4c
commit 46d08cb
Show file tree

Hide file tree

Showing 3 changed files with 2,267 additions and 1,704 deletions.
diff --git a/release/staging-resources-cdk/lib/GitHubAccessStack.ts b/release/staging-resources-cdk/lib/GitHubAccessStack.ts
@@ -19,6 +19,9 @@ export class GitHubAccessStack extends Stack {
 
     this.gitHubOidcProvider = new OpenIdConnectProvider(this, 'GitHubOidcProvider', {
       url: 'https://token.actions.githubusercontent.com',
+      thumbprints: [
+        '6938fd4d98bab03faadb97b34396831e3780aea1'
+      ],
       clientIds: ['sts.amazonaws.com']
     });
   }