name: Deploy
on:
  push:
    branches: [main]

permissions:
  id-token: write
  contents: read

concurrency:
  group: deploy
  cancel-in-progress: false

jobs:
  deploy:
    uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3
    with:
      stack-name: sh-openswe-traces
      cfn-role-arn: arn:aws:iam::328440206208:role/sh-openswe-traces-cfn-exec-role
    secrets:
      deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}
      parameter-overrides: ${{ secrets.SAM_PARAMETER_OVERRIDES }}