proposal-system/.github/workflows/deploy.yaml
Adam Moussa 63422608c7
chore(ci): track .github reusable workflows on @main (#173)
Switches all reusable-workflow references from the frozen SHA
c040bfaa (INF-M8 supply-chain pin) to @main, matching every other repo
in the org. This lets proposal-system pick up the actions/checkout v6->v7
bump (and future reusable-workflow changes) automatically instead of
staying frozen on the pre-bump commit.

Note: this intentionally reverses the INF-M8 SHA-pin hardening for
consistency with the rest of the org's @main convention.
2026-06-25 11:55:29 -04:00

26 lines
631 B
YAML

name: Deploy
# Auto-deploy on push to main disabled for now; manual trigger only.
on:
workflow_dispatch:
concurrency:
group: deploy-backend
cancel-in-progress: false
permissions:
id-token: write
contents: read
jobs:
deploy:
name: Deploy to AWS
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@main
with:
cdk-dir: infra
dotnet-version: "8.0.x"
dotnet-publish-project: api/src/ProposalSystem.Api/ProposalSystem.Api.csproj
python-version: "3.12"
post-deploy-script: scripts/post-deploy.sh
secrets:
deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}