PoC #1

	name: Release Authenticator
	on:
	workflow_call:
	push:
	branches: [ dev ]

	permissions:
	id-token: write
	contents: write
	actions: write

	jobs:
	release:

	name: Release new Authenticator version
	runs-on: macos-latest
	env:
	GITHUB_EMAIL: [email protected]
	GITHUB_USER: aws-amplify-ops
	steps:
	- name: Configure AWS credentials
	uses: aws-actions/configure-aws-credentials@8c3f20df09ac63af7b3ae3d7c91f105f857d8497 #v4
	with:
	role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
	role-session-name: ${{ format('{0}.release', github.run_id) }}
	aws-region: ${{ secrets.AWS_REGION }}
	mask-aws-account-id: true

	# - id: retrieve-token
	# name: Retrieve Token
	# env:
	# DEPLOY_SECRET_ARN: ${{ secrets.DEPLOY_SECRET_ARN }}
	# run: \|
	# PAT=$(aws secretsmanager get-secret-value \
	# --secret-id "$DEPLOY_SECRET_ARN" \
	# \| jq -r ".SecretString \| fromjson \| .Credential")
	# echo "token=$PAT" >> $GITHUB_OUTPUT

	- name: Checkout repo
	uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
	with:
	fetch-depth: 10
	#token: ${{steps.retrieve-token.outputs.token}}

	- name: Setup Ruby
	uses: ruby/setup-ruby@250fcd6a742febb1123a77a841497ccaa8b9e939 # v1.152.0
	with:
	ruby-version: '3.2.1'
	bundler-cache: true

	- name: Release Package
	run: bundle exec fastlane release

Provide feedback