Repository navigation
42 lines (40 loc) · 1.81 KB
/
Copy pathdeploy.yml
File metadata and controls
42 lines (40 loc) · 1.81 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
name: Deploy
on:
workflow_dispatch:
jobs:
generate-update-center-prod:
runs-on: github-ubuntu-latest-s
environment: production
permissions:
id-token: write
contents: read
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Setup Mise
uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1
with:
version: 2026.3.13
- name: Vault Secrets
id: secrets
uses: SonarSource/vault-action-wrapper@v3
with:
secrets: |
development/artifactory/token/{REPO_OWNER_NAME_DASH}-public-reader access_token | ARTIFACTORY_ACCESS_TOKEN;
development/kv/data/repox url | ARTIFACTORY_URL;
development/aws/sts/downloads access_key | AWS_ACCESS_KEY_ID;
development/aws/sts/downloads secret_key | AWS_SECRET_ACCESS_KEY;
development/aws/sts/downloads security_token | AWS_SESSION_TOKEN;
- name: Generate and Upload Update Center Metadata
run: |
source po-generate-update-center-prod/generate.sh
source po-generate-update-center-prod/prepare_transfer_dir.sh
po-generate-update-center-prod/upload.sh
env:
AWS_ACCESS_KEY_ID: ${{ fromJSON(steps.secrets.outputs.vault).AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ fromJSON(steps.secrets.outputs.vault).AWS_SECRET_ACCESS_KEY }}
AWS_SESSION_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).AWS_SESSION_TOKEN }}
S3_BUCKET: downloads-cdn-eu-central-1-prod
AWS_DEFAULT_REGION: eu-central-1
ARTIFACTORY_ACCESS_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_ACCESS_TOKEN }}
ARTIFACTORY_URL: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_URL }}