mirror of
https://github.com/Sea-Haven-Industries/.github.git
synced 2026-09-30 22:13:12 +00:00
9c1ecf9428
* docs: align organization templates with Cursor conventions Refs: PLAT-62 * ci: add deterministic PR policy gate Refs: PLAT-62 * fix(ci): grandfather unchanged workflow policy debt Refs: PLAT-62 * fix(ci): address PR policy security review Refs: PLAT-62 * fix(ci): scan copied workflow files Refs: PLAT-62 * fix(ci): close remaining workflow policy bypasses Refs: PLAT-62 * fix(policy): reject uses block scalar action refs Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> * fix(policy): preserve line-specific violation fingerprints Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com>
20 lines
918 B
YAML
20 lines
918 B
YAML
name: Deploy (SAM)
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
deploy:
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
|
|
with:
|
|
# Required: the CloudFormation stack name (kebab-case, matches repo name).
|
|
# NOTE: this is a literal placeholder on purpose — starter-workflow variables
|
|
# like $default-branch substitute to the BRANCH name ("main"), not the repo name.
|
|
stack-name: REPLACE-ME-stack-name
|
|
# Required: the CloudFormation execution role ARN for this stack — the
|
|
# github-cfn-execution-role in the repo's TARGET account (part of the
|
|
# per-account deploy substrate; the account must have it provisioned
|
|
# before first deploy). Do not point new repos at the management account.
|
|
cfn-role-arn: REPLACE-ME-cfn-role-arn
|
|
secrets:
|
|
deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}
|