ci(deploy): freeze CDK pushes to main (PLAT-77) (#55)

* ci(deploy): freeze CDK pushes to main (PLAT-77)

HCP Terraform is the deploy path for the prod move. A push to main must not replace the management-account instance.

* ci(deploy): keep the v1.0.19 CDK workflow pin (PLAT-77)

The freeze should drop the push trigger only. The reusable workflow SHA stays on the version already on main.
This commit is contained in:
Adam Moussa 2026-09-29 22:31:37 +00:00 • committed by GitHub
parent e4f156bb98
commit ee3b28b5b5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -1,7 +1,9 @@
name: Deploy
# PLAT-77: push-to-main CDK deploy is frozen so HCP Terraform is the only
# path that can change this stack. workflow_dispatch stays for an explicit
# rollback of the management-account stack.
on:
push:
branches: [main]
workflow_dispatch:
permissions:
id-token: write