Skip to main content

6 posts tagged with "Atmos Pro"

Atmos Pro premium features and integrations

View All Tags

Just-in-time GitHub tokens for CI with Atmos Pro STS

· 5 min read
Erik Osterman
Founder @ Cloud Posse

Fetching private Terraform modules, Atmos source: components, and vendored artifacts in CI has always meant handing a long-lived, over-privileged GitHub credential to your pipeline — a PAT, a machine user, or a deploy key, sitting in a CI secret. Atmos Pro STS replaces that with just-in-time, least-privilege, short-lived GitHub tokens that are minted at the start of a run and revoked at the end — with zero .tf changes.

Atmos Pro now reports check status on GitHub merge queue commits

· 4 min read
Erik Osterman
Founder @ Cloud Posse

atmos describe affected --upload now works under GITHUB_EVENT_NAME=merge_group, so Atmos Pro can correctly conclude check runs on the synthetic commits GitHub creates when a PR enters a merge queue. To control what runs on those synthetic commits, declare a new settings.pro.merge_group.checks_requested.workflows block in your stack config and point it at the workflow you want the queue to dispatch (in most cases, the same plan workflow you already use for pull_request.synchronize).