Skip to content

Conversation

@hannes
Copy link
Member

@hannes hannes commented Oct 29, 2025

No description provided.

@hannes
Copy link
Member Author

hannes commented Oct 29, 2025

See duckdb/duckdb#19539

@hannes hannes requested a review from evertlammerts October 29, 2025 12:51
@hannes
Copy link
Member Author

hannes commented Oct 29, 2025

@evertlammerts can you get this through please?

Copy link
Collaborator

@evertlammerts evertlammerts left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm.

For what it's worth, if we'd use Github OIDC (with a minimally scoped IAM role, similar to / same as what I guess we use for the access key) then we don't need to store an AWS access key at all. That's the same idea as PyPI's trusted publishers. Removes the risk of leaking the key.

@evertlammerts evertlammerts added this pull request to the merge queue Oct 29, 2025
Merged via the queue into duckdb:main with commit dbe36b6 Oct 29, 2025
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants