[posquit0]

👋 Background

Package producers and consumers need CodeArtifact credentials regardless of whether they use uv, Poetry, npm, pnpm, Yarn, Maven, or Gradle. This action provides the shared authentication step after the caller configures AWS credentials.

⚙️ Description

• Add aws.codeartifact.configure-credentials for pypi, npm, and maven endpoints using Bash and the existing AWS CLI.
• Require explicit region, domain owner, domain, repository, and format. Default token duration to 0 (the remaining assumed-role session lifetime), with support for explicit durations of 900–43200 seconds.
• Mask the token and export CODEARTIFACT_AUTH_TOKEN and CODEARTIFACT_REPOSITORY_ENDPOINT for subsequent steps only after both API calls succeed. Expose the endpoint as an action output; never expose the token as an action output.
• Document IAM prerequisites, OIDC/role chaining, and package-manager-specific use. Package manager configuration remains with the caller.
• Add offline regression tests and an amd64/arm64 workflow that exercises the composite action with a mocked AWS CLI.

🚨 To Reviewers

Validation completed locally: 35 regression scenarios across four test methods, ShellCheck, actionlint, GitHub action/workflow JSON schemas, and git diff --check.

CI verifies the actual composite environment/output wiring on Linux amd64 and arm64. No live AWS API or package publishing test has been performed.

[github-actions]

GitHub Actions Integration

Repository	jactionlint	check-jsonschema (workflows)	check-jsonschema (actions)
tedilabs/github-actions	✅	✅	✅

✅ All 1 passed.