Deploy #55
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy | |
| on: | |
| workflow_dispatch: | |
| jobs: | |
| generate-update-center-prod: | |
| runs-on: github-ubuntu-latest-s | |
| environment: production | |
| permissions: | |
| id-token: write | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 | |
| - name: Setup Mise | |
| uses: jdx/mise-action@c37c93293d6b742fc901e1406b8f764f6fb19dac # v2.4.4 | |
| with: | |
| version: 2025.7.12 | |
| - name: Vault Secrets | |
| id: secrets | |
| uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32 # v3.1.0 | |
| with: | |
| secrets: | | |
| development/artifactory/token/{REPO_OWNER_NAME_DASH}-public-reader access_token | ARTIFACTORY_ACCESS_TOKEN; | |
| development/kv/data/repox url | ARTIFACTORY_URL; | |
| development/aws/sts/downloads access_key | AWS_ACCESS_KEY_ID; | |
| development/aws/sts/downloads secret_key | AWS_SECRET_ACCESS_KEY; | |
| development/aws/sts/downloads security_token | AWS_SESSION_TOKEN; | |
| - name: Generate and Upload Update Center Metadata | |
| run: | | |
| source po-generate-update-center-prod/generate.sh | |
| source po-generate-update-center-prod/prepare_transfer_dir.sh | |
| po-generate-update-center-prod/upload.sh | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ fromJSON(steps.secrets.outputs.vault).AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ fromJSON(steps.secrets.outputs.vault).AWS_SECRET_ACCESS_KEY }} | |
| AWS_SESSION_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).AWS_SESSION_TOKEN }} | |
| S3_BUCKET: downloads-cdn-eu-central-1-prod | |
| AWS_DEFAULT_REGION: eu-central-1 | |
| ARTIFACTORY_ACCESS_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_ACCESS_TOKEN }} | |
| ARTIFACTORY_URL: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_URL }} |