From bdd4e89cbda3f9ff6d91e7f29348e934547821ef Mon Sep 17 00:00:00 2001
From: Tim Zhou <tizhou@redhat.com>
Date: Mon, 17 Nov 2025 20:24:14 -0500
Subject: [PATCH] using oidc instead passwd grant

Signed-off-by: Tim Zhou <tizhou@redhat.com>
---
 .cirrus.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.cirrus.yml b/.cirrus.yml
index 09530f17..7e48098f 100644
--- a/.cirrus.yml
+++ b/.cirrus.yml
@@ -2,7 +2,11 @@ env:
     IMAGE_SUFFIX: "c20250422t130822z-f42f41d13"
     WINDOWS_AMI: "win-server-wsl-${IMAGE_SUFFIX}"
 
-aws_credentials: ENCRYPTED[1659bb9d94b525492b4cab3f3e9a2ad8708fd6c23e821818b59875bd9b521b11080ce1bf11dbd46876978e70a99ef118]
+aws_credentials:
+  role_arn: arn:aws:iam::449134212816:role/AssumeRoleForGithubRepo
+  role_session_name: cirrus # an identifier for the assumed role session
+  region: us-east-2 # region to use for calling the STS 
+
 
 win_test_task:
     name: win_test