cd.yaml

name: CD
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

permissions:
  id-token: write
  contents: read

env:
  CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
  CLOUDFLARE_DEFAULT_ACCOUNT_ID: f02b3ef168fe64129e9941b4fb2e4dc1

jobs:
  sst:
    name: SST
    runs-on: ubuntu-latest
    environment: production
    concurrency:
      group: production
    steps:
      - name: Git clone the repository
        uses: actions/checkout@v4
      
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: "arn:aws:iam::101829795063:role/mattrax-gh-actions"
          aws-region: us-east-1
          role-session-name: mattrax-sst-workflow
      
      - uses: pnpm/action-setup@v4
        with:
          version: latest
      
      - name: Rust cache
        uses: Swatinem/rust-cache@v2
      
      - name: Install dependencies
        run: pnpm i
      
      - name: SST
        run: pnpm sst deploy --stage prod