galaxyproject/ga2 (opens in new tab)

name: Deploy to S3 and CloudFront

on:
  push:
    branches: [main]
permissions:
  id-token: write
  contents: read
jobs:
  build-and-deploy:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout Code
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v3
        with:
          node-version: "20.10.0"

      - name: Install Dependencies
        run: npm ci

      - name: Build Next.js Site
        env:
          NEXT_PUBLIC_BASE_PATH: ""
        run: npm run build:local

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::${{ secrets.DEV_AWS_ACCOUNT_ID }}:role/${{ secrets.DEV_AWS_ROLE_NAME }}
          role-session-name: ${{ secrets.DEV_ROLE_SESSION_NAME }}
          aws-region: ${{ secrets.DEV_AWS_REGION }}

      - name: Sync to S3
        env:
          SRCDIR: out/
        run: |
          aws s3 sync $SRCDIR s3://${{ secrets.DEV_S3_BUCKET_NAME }} --delete

      - name: Invalidate CloudFront Cache
        run: |
          aws cloudfront create-invalidation --distribution-id ${{ secrets.DEV_CLOUDFRONT_DISTRIBUTION_ID }} --paths "/*"

name: Deploy to S3 and CloudFront

on:
  push:
    branches:
      # - main  # todo, consolidate auth approach and merge dev-deploy into this.
      - production

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    environment: ${{ github.ref == 'refs/heads/production' && 'production' || 'development' }}

    steps:
      - name: Checkout Code
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v3
        with:
          node-version: "20.10.0"

      - name: Install Dependencies
        run: npm ci

      - name: Build Next.js Site
        env:
          NEXT_PUBLIC_BASE_PATH: ""
        run: npm run build:local

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v3
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: Sync to S3
        env:
          SRCDIR: out/
        run: |
          aws s3 sync $SRCDIR s3://${{ secrets.S3_BUCKET_NAME }} --delete

      - name: Invalidate CloudFront Cache
        run: |
          aws cloudfront create-invalidation --distribution-id ${{ secrets.CLOUDFRONT_DISTRIBUTION_ID }} --paths "/*"

on:
  push:
    branches:
      - main
  workflow_dispatch: # Enable manual triggering

permissions:
  contents: write
  pull-requests: write

name: release-please

jobs:
  release-please:
    runs-on: ubuntu-latest
    steps:
      - uses: googleapis/release-please-action@v4
        id: release
        with:
          config-file: release-please-config.json
          token: ${{ secrets.GITHUB_TOKEN }}

name: Run checks
on: [pull_request]

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - uses: actions/setup-node@v2
        with:
          node-version: "20.10.0"
      - run: |
          npm ci
          npm run check-format
          npm run lint
          npx tsc --noEmit