From 829aa01f07ab67ec6b5204b554b3a3ae1ac9949d Mon Sep 17 00:00:00 2001
From: Kevin Green <kevin.green@braintrust.dev>
Date: Wed, 7 Oct 2026 11:48:56 -0400
Subject: [PATCH] Use dedicated ECR role for Helm releases

---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index acdf72d..e7e2ffb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -57,7 +57,7 @@ jobs:
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
         with:
-          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
+          role-to-assume: arn:aws:iam::872608195481:role/github-helm-release
           aws-region: us-east-1
 
       - name: Login to Amazon ECR Public