putio-design/.github/workflows/deploy.yml at 6fca628284aeb1424b4e5ff1f2ecec64fb0a5e71 · putdotio/putio-design · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
name: Deploy

on:
  push:
    branches:
      - main
    paths:
      - ".github/workflows/deploy.yml"
      - ".node-version"
      - "infra/**"
      - "package.json"
      - "pnpm-lock.yaml"
      - "pnpm-workspace.yaml"
      - "DESIGN.md"
      - "dist/**"
      - "docs/**"
      - "scripts/**"
      - "sst.config.ts"
      - "system/**"
      - "tokens/**"
      - "tsconfig.json"
  workflow_dispatch:

concurrency:
  group: putio-design-deploy-production
  cancel-in-progress: false

permissions:
  contents: read

jobs:
  deploy:
    runs-on: ubuntu-latest
    environment:
      name: production
      url: https://${{ vars.DESIGN_DOMAIN }}
    permissions:
      contents: read
      id-token: write
    env:
      AWS_REGION: ${{ vars.AWS_REGION }}
      AWS_ROUTE53_ZONE_ID: ${{ vars.AWS_ROUTE53_ZONE_ID }}
      AWS_WILDCARD_CERT_ARN: ${{ vars.AWS_WILDCARD_CERT_ARN }}
      DESIGN_DOMAIN: ${{ vars.DESIGN_DOMAIN }}
    steps:
      - name: Check out repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Set up Node
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.0.0
        with:
          node-version-file: .node-version

      - name: Set up pnpm
        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
        with:
          cache: false

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Verify design system
        run: pnpm verify

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@acca2b1b2070338fb9fd1ca27ecee81d687e58e5 # v6.1.2
        with:
          aws-region: ${{ env.AWS_REGION }}
          role-to-assume: ${{ vars.AWS_DEPLOY_ROLE_ARN }}

      - name: Deploy design site
        run: pnpm deploy:production