deploy.yaml

name: "deploy"
on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - "*"
jobs:
  pre-commit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: pre-commit/action@v3.0.0
  sceptre-deploy:
    runs-on: ubuntu-latest
    if: ${{ github.ref == 'refs/heads/main' }}
    needs: [ 'pre-commit' ]
    permissions:
      id-token: write
      contents: read
    steps:
      - name: 'Checkout'
        uses: actions/checkout@v4
      - name: Assume AWS Role
        uses: aws-actions/configure-aws-credentials@v2
        with:
          aws-region: "us-east-1"
          role-to-assume: "arn:aws:iam::867686887310:role/sagebase-github-oidc-imagebuilder-deploy"
          role-session-name: GA-${{ github.repository_owner }}-${{ github.event.repository.name }}-${{ github.run_id }}
          role-duration-seconds: 3600
      - name: 'Sceptre Deploy'
        uses: Sceptre/github-ci-action@v2.3.0
        with:
          sceptre_version: '4.1.0'
          sceptre_plugins: >-
            sceptre-ssm-resolver==1.2.2
          sceptre_subcommand: 'launch prod --prune --yes'