deploy.yml

name: Lint Test Deploy

on:
  push:
    branches:
      - main
      - develop

jobs:
  lint-test:
    uses: ./.github/workflows/lint-test.yml
    secrets: inherit
  deploy:
    needs: [lint-test]
    runs-on: ubuntu-latest
    concurrency: ${{ github.ref_name == 'main' && 'Production' || 'Staging' }}
    environment: ${{ github.ref_name == 'main' && 'Production' || 'Staging' }}
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-node@v6
        with:
          node-version-file: '.nvmrc'
      - name: Install dependencies
        run: npm ci
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@master
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_KEY }}
          aws-region: ${{ vars.AWS_REGION }}
      - name: Bootstrap CDK
        run: npm run cdk bootstrap
      - name: CDK Deploy
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          APP_ENV: ${{ vars.APP_ENV }}
          APP_DOMAIN_NAME: ${{ vars.APP_DOMAIN_NAME }}
        run: npm run cdk deploy -- --require-approval never