Merge pull request #44 from cloudgraphdev/fix/gh-brew-notify-jobs-1

Updating the homebrew and publish job permissions

Author: zahidferz

.github/workflows/homebrew.yaml

@@ -9,18 +9,22 @@ jobs:
   homebrew:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+          token: ${{secrets.gh_token}}
       - uses: actions/setup-node@v2
         with:
           node-version: 16
           registry-url: 'https://registry.npmjs.org'
 
       - name: Mkdir .aws
-        run: mkdir -p /home/node/.aws
+        run: mkdir -p ~/.aws
 
       - name: Set .aws/config
         run: |
-          cat << EOF > /home/node/.aws/config
+          cat << EOF > ~/.aws/config
           [default]
           region=us-east-1
           output=json
@@ -31,7 +35,7 @@ jobs:
           EOF
       - name: Set .aws/credentials
         run: |
-          cat << EOF > /home/node/.aws/credentials
+          cat << EOF > ~/.aws/credentials
           [default]
           aws_access_key_id = $AWS_ACCESS_KEY_ID
           aws_secret_access_key = $AWS_SECRET_ACCESS_KEY
@@ -61,8 +65,6 @@ jobs:
         run: yarn homebrew
         env:
           NODE_AUTH_TOKEN: ${{secrets.npm_token}}
-          AWS_SHARED_CREDENTIALS_FILE: /home/node/.aws/credentials
-          AWS_CONFIG_FILE: /home/node/.aws/config
           AWS_SDK_LOAD_CONFIG: true
           AWS_PROFILE: cloudgraph-iac
           AWS_ACCESS_KEY_ID: ${{secrets.aws_access_key_id}}

.github/workflows/notify.yml

@@ -8,7 +8,7 @@ jobs:
   notify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v2
         with:
           node-version: 16

.github/workflows/pr-validator.yml

@@ -11,7 +11,7 @@ jobs:
   pr-validation:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - run : |
           if [ "$TARGET_BRANCH" == "master" ] && [ "$SOURCE_BRANCH" == "beta" ]; then
               echo "Merge from $SOURCE_BRANCH to $TARGET_BRANCH is valid"

.github/workflows/publish.yml

@@ -15,7 +15,11 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+          token: ${{secrets.gh_token}}
       - uses: actions/setup-node@v2
         with:
           node-version: 16