[pre-commit.ci] pre-commit autoupdate (#6) #8
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: post-merge | |
| on: | |
| # Run on merges to master or tag pushes | |
| push: | |
| branches: [ 'master' ] | |
| tags: [ '*' ] | |
| concurrency: | |
| group: ${{ github.workflow }} | |
| jobs: | |
| lambda-test: | |
| uses: "./.github/workflows/test.yaml" | |
| package-and-publish: | |
| runs-on: ubuntu-latest | |
| needs: lambda-test | |
| permissions: | |
| id-token: write | |
| env: | |
| BOOTSTRAP_BUCKET: bootstrap-awss3cloudformationbucket-19qromfd235z9 | |
| ESSENTIALS_BUCKET: essentials-awss3lambdaartifactsbucket-x29ftznj6pqw | |
| steps: | |
| - uses: actions/checkout@v4 | |
| # install sam-cli, build, and lint | |
| - uses: ./.github/actions/sam-build-and-lint | |
| # authenticate with AWS via OIDC | |
| - uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-region: us-east-1 | |
| role-to-assume: arn:aws:iam::745159704268:role/sagebase-github-oidc-lambda-template-deploy-sageit | |
| role-session-name: GHA-${{ github.event.repository.name }}-${{ github.run_id }} # Must not exceed 64 chars | |
| role-duration-seconds: 900 | |
| # upload the lambda artifact to s3 and generate a cloudformation template referencing it | |
| - run: sam package --template-file .aws-sam/build/template.yaml --s3-bucket $ESSENTIALS_BUCKET --s3-prefix ${{ github.event.repository.name }}/${{ github.ref_name }} --output-template-file .aws-sam/build/${{ github.event.repository.name }}.yaml | |
| # validate final template with cloudformation | |
| - run: aws cloudformation validate-template --template-body file://.aws-sam/build/${{ github.event.repository.name }}.yaml | |
| # upload the final template to s3 | |
| - run: aws s3 cp .aws-sam/build/${{ github.event.repository.name }}.yaml s3://$BOOTSTRAP_BUCKET/${{ github.event.repository.name }}/${{ github.ref_name }}/ |