Merge pull request #42 from voquis/39-pin-versions #25
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish | |
| on: | |
| push: | |
| branches: [ main ] | |
| tags: [ '*.*.*' ] | |
| jobs: | |
| publish: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write | |
| contents: read | |
| steps: | |
| # Checkout project code | |
| - uses: actions/checkout@v3 | |
| # Set up python environment | |
| - uses: actions/setup-python@v3 | |
| with: | |
| python-version: '3.11' | |
| # Install python poetry and dependencies for use in later steps | |
| - run: ./scripts/poetry.sh | |
| # Change working directory and run build script | |
| - working-directory: ./lambda | |
| run: ../scripts/build.sh | |
| # Prepare AWS credentials using OIDC provider (uses id-token and contents) | |
| - uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} | |
| aws-region: eu-west-2 | |
| # Change working directory and run build script | |
| - working-directory: ./lambda | |
| run: ../scripts/publish.sh |