build-and-deploy.yml

name: Build and Deploy Docs

on: 
  workflow_dispatch: # This enables manual runs. Just in case.
  push:
      branches:
      - main
      - develop

jobs:
  deploy:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    permissions:
      id-token: write
      contents: read
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-node@v3
        with:
          node-version: 20
          cache: 'yarn'
      - name: Install dependencies
        run: yarn install
      - name: Build
        run: yarn build
      - name: Set AWS credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          role-to-assume: arn:aws:iam::338683922796:role/semgrep-docs-deploy-role
          role-duration-seconds: 900
          role-session-name: deploy
          aws-region: us-west-2
      - name: Deploy to staging
        if: github.ref == 'refs/heads/develop'
        run: aws s3 sync build/ s3://staging-semgrep-dev/docs --delete
      - name: Deploy to production
        if: github.ref == 'refs/heads/main'
        run: aws s3 sync build/ s3://semgrep-docs/docs --delete