ci(deploy): clarify content-only workflows

This commit is contained in:
Adam Moussa 2026-08-30 22:40:41 -04:00
parent 8380548917
commit 74ef5b9ecd
No known key found for this signature in database
3 changed files with 7 additions and 21 deletions

View file

@ -1,4 +1,4 @@
name: Deploy staging
name: Deploy staging content
on:
workflow_dispatch: {}
@ -13,7 +13,7 @@ concurrency:
jobs:
deploy:
name: Deploy to staging
name: Publish content to staging
# Deploy only the exact staging branch ref, never a tag or other ref
# (workflow_dispatch can be invoked from arbitrary refs).
if: github.ref == 'refs/heads/staging'
@ -34,20 +34,6 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
- name: Resolve governance comparison ref
id: governance-ref
shell: bash
env:
EVENT_NAME: ${{ github.event_name }}
EVENT_BEFORE: ${{ github.event.before }}
run: |
set -euo pipefail
if [[ "${EVENT_NAME}" == "push" && -n "${EVENT_BEFORE}" && ! "${EVENT_BEFORE}" =~ ^0+$ ]]; then
base="${EVENT_BEFORE}"
else
base="origin/dev"
fi
printf 'base=%s\n' "${base}" >> "${GITHUB_OUTPUT}"
- name: Set up Terraform
uses: hashicorp/setup-terraform@dfe3c3f87815947d99a8997f908cb6525fc44e9e # v4.0.1
with:
@ -61,7 +47,7 @@ jobs:
- name: Quality gates (full verify before any deploy)
run: npm ci && npm run verify
env:
GOVERNANCE_BASE: ${{ steps.governance-ref.outputs.base }}
GOVERNANCE_BASE: origin/dev
- name: Assume staging deploy role (OIDC)
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3

View file

@ -1,4 +1,4 @@
name: Deploy Terraform POC
name: Deploy tf-poc content
on:
workflow_dispatch: {}
@ -13,7 +13,7 @@ concurrency:
jobs:
deploy:
name: Deploy to tf-poc
name: Publish content to tf-poc
if: github.ref == 'refs/heads/feature/terraform-cd-poc'
runs-on: ubuntu-latest
environment: tf-poc

View file

@ -1,4 +1,4 @@
name: Deploy
name: Deploy dev content
on:
workflow_dispatch: {}
@ -13,7 +13,7 @@ concurrency:
jobs:
deploy:
name: Deploy to dev
name: Publish content to dev
if: github.ref == 'refs/heads/dev'
runs-on: ubuntu-latest
env: