amazon-web-services - 部署到 AWS S3 与 github 同步

Question

我正在尝试使用 github 操作将静态站点部署到 AWS S3 和 Cloudfront。我的 Github 操作代码是:

name: deploy-container

on:
  push:
    branches:
      - master
    paths:
      - 'packages/container/**'

defaults:
  run:
    working-directory: packages/container

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2
      - run: npm install
      - run: npm run build

      - uses: chrislennon/action-aws-cli@v1.1
      - run: aws s3 sync dist s3://${{secrets.AWS_S3_BUCKET_NAME}}/container/latest
        env:
          AWS_ACCESS_KEY_ID: ${{secrets.AWS_ACCESS_KEY_ID}}
          AWS_SECRET_ACCESS_KEY: ${{secrets.AWS_SECRET_ACCESS_KEY}}

但是当我尝试构建时出现了这些错误

Answer 1

仅当您对应用程序目录内的文件进行了一些更改时，GitHub 才会重新部署您的应用程序。我想您只更改了 yml 文件并尝试在 GitHub 上重新运行该作业。但是从错误信息来看，这是一种使用标签ACTIONS_ALLOW_UNSECURE_COMMANDS的不安全方法。最好考虑为 GitHub 操作使用官方 AWS，而不是使用 ACTIONS_ALLOW_UNSECURE_COMMANDS。

name: deploy-container

on:
  push:
    branches:
      - master
    paths:
      - 'packages/container/**'

defaults:
  run:
    working-directory: packages/container

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2
      - run: npm install
      - run: npm run build

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets. AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets. AWS_SECRET_ACCESS_KEY }}
          aws-region: us-west-1

      - name: Copy files to the s3 website content bucket
        run:
          aws s3 sync dist s3://${{ secrets.AWS_S3_BUCKET_NAME }}/container/latest