DO NOT MERGE #2922

	name: Deploy

	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main

	jobs:
	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Install Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	- name: NPM Install
	run: \|
	npm ci
	npm i --os=linux --cpu=arm64
	- name: Build
	run: npm run build
	- name: Upload artifacts
	uses: actions/upload-artifact@v4
	with:
	path: build

	deploy:
	name: Deploy to AWS
	needs: build
	if: github.event_name == 'push' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
	strategy:
	fail-fast: false
	matrix:
	include:
	- env: dev
	url: https://dev.gcn.nasa.gov
	- env: test
	url: https://test.gcn.nasa.gov
	- env: prod
	url: https://gcn.nasa.gov
	environment:
	name: ${{ matrix.env }}
	url: ${{ matrix.url }}
	permissions:
	contents: read
	id-token: write
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Install Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	- name: NPM Install
	run: npm ci
	- name: Download artifacts
	uses: actions/download-artifact@v4
	with:
	merge-multiple: true
	path: build
	- name: Configure AWS credentials
	uses: aws-actions/configure-aws-credentials@v4
	with:
	role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
	aws-region: us-east-1
	- name: Deploy
	run: npx arc deploy --prune --production --no-hydrate

Provide feedback