From abb749dcb0a5e6d9b6c7fac47fe15471e4f23b78 Mon Sep 17 00:00:00 2001 From: Adam Moussa Date: Mon, 28 Sep 2026 16:30:24 -0400 Subject: [PATCH] ci(deploy): freeze CDK pushes to main (PLAT-77) HCP Terraform is the deploy path for the prod move. A push to main must not replace the management-account instance. --- .github/workflows/deploy.yaml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml index 95053fc..fedbb16 100644 --- a/.github/workflows/deploy.yaml +++ b/.github/workflows/deploy.yaml @@ -1,7 +1,9 @@ name: Deploy +# PLAT-77: push-to-main CDK deploy is frozen so HCP Terraform is the only +# path that can change this stack. workflow_dispatch stays for an explicit +# rollback of the management-account stack. on: - push: - branches: [main] + workflow_dispatch: permissions: id-token: write @@ -13,7 +15,7 @@ concurrency: jobs: deploy: - uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@0a1010e63248c9ca9f042c870eb2c579ba6b9455 # v1.0.19 + uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11 with: node-version: "24" secrets: