mirror of
https://github.com/Sea-Haven-Industries/.github.git
synced 2026-09-30 10:33:12 +00:00
9c1ecf9428
* docs: align organization templates with Cursor conventions Refs: PLAT-62 * ci: add deterministic PR policy gate Refs: PLAT-62 * fix(ci): grandfather unchanged workflow policy debt Refs: PLAT-62 * fix(ci): address PR policy security review Refs: PLAT-62 * fix(ci): scan copied workflow files Refs: PLAT-62 * fix(ci): close remaining workflow policy bypasses Refs: PLAT-62 * fix(policy): reject uses block scalar action refs Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> * fix(policy): preserve line-specific violation fingerprints Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com>
14 lines
456 B
YAML
14 lines
456 B
YAML
name: Deploy (CDK)
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
deploy:
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
|
|
with:
|
|
# Matches local dev (Node 24 / npm 11, lockfileVersion 3). This is also the
|
|
# reusable workflow's default — passed explicitly to pin against drift.
|
|
node-version: "24"
|
|
secrets:
|
|
deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}
|