proposal-system/.github/workflows/deploy.yaml
Adam Moussa 6263551b02 Fix deploy workflow: add permissions for OIDC token
Caller must declare id-token: write for the reusable workflow's
OIDC authentication to function.
2026-05-18 15:32:15 -04:00

26 lines
570 B
YAML

name: Deploy
on:
push:
branches: [main]
concurrency:
group: deploy-backend
cancel-in-progress: false
permissions:
id-token: write
contents: read
jobs:
deploy:
name: Deploy to AWS
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@main
with:
cdk-dir: infra
dotnet-version: "8.0.x"
dotnet-publish-project: api/src/ProposalSystem.Api/ProposalSystem.Api.csproj
python-version: "3.12"
post-deploy-script: scripts/post-deploy.sh
secrets:
deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}