From cb3b4996742cba2367e7dc34df7f91479afcd27c Mon Sep 17 00:00:00 2001 From: Michael Lehmann Date: Fri, 29 Aug 2025 16:47:46 -0700 Subject: [PATCH] chore: redact s3 contents --- .github/workflows/tests-integ-release.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/tests-integ-release.yml b/.github/workflows/tests-integ-release.yml index 1effe7b..2ef01b0 100644 --- a/.github/workflows/tests-integ-release.yml +++ b/.github/workflows/tests-integ-release.yml @@ -115,15 +115,13 @@ jobs: #NOTE: This step should succeed. The role should have permission only to list all buckets. - name: list buckets - run: | - aws s3 ls + run: aws s3 ls > /dev/null #NOTE: This step should fail. we don't want the role to have permission to see the bucket contents. - name: try to list bucket contents id: bucketContentsStep continue-on-error: true - run: | - aws s3 ls s3://cawsc-integ-tests-bucket + run: aws s3 ls s3://cawsc-integ-tests-bucket > /dev/null #But the test fails if we could list the bucket contents. - name: fail if we can list bucket contents