tmp

Author: TheButlah

.github/workflows/ta.yaml

@@ -147,10 +147,13 @@ jobs:
     name: Sign
     runs-on: ubuntu-24.04
     needs: [check-inputs, build]
+    environment: stage
     env:
       CI_TARGET_ENV: ${{ inputs.target_env }}
+      CI_AWS_ROLE: ${{ secrets.AWS_ROLE }}
     permissions:
       contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # pin@v6.0.1
       - uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # pin@v31.8.4
@@ -165,6 +168,17 @@ jobs:
         uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # pin@v2.8.0
         with:
           key: custom-${{ hashFiles('**/*.nix', 'flake.lock') }}
+
+      - name: Check secrets
+        run: |
+          set -Eeuxo pipefail
+          echo $CI_AWS_ROLE | wc
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # pin@v5.1.1
+        with:
+          aws-region: eu-central-1
+          role-to-assume: ${{ secrets.AWS_ROLE }}
+
       - name: Print environment
         run: |
           uname -a

Cargo.toml

@@ -11,5 +11,6 @@ license = "MIT OR (Apache-2.0 WITH LLVM-exception)"
 repository = "https://github.com/worldcoin/orb-rustzone-ci"
 
 [workspace.dependencies.orb-x-optee]
-branch = "main"
+# branch = "main"
+branch = "thebutlah/test-ci"
 git = "https://github.com/worldcoin/orb-software"