build.yml

on:
  push:
    branches:
    - main

permissions:
  contents: write
  pull-requests: read
  id-token: write
  pages: write

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4
    - name: Set up Node.js
      uses: actions/setup-node@v4
      with:
        node-version: 16
        registry-url: 'https://registry.npmjs.org'

    - name: Install packages
      run: yarn --frozen-lockfile

    - name: Run Setup
      run: yarn setup
    - name: Run build
      run: yarn build

    - name: Configure AWS Credentials
      if: github.repository_owner == 'Rhosys' && github.ref == 'refs/heads/main'
      uses: aws-actions/configure-aws-credentials@036a4a1ddf2c0e7a782dca6e083c6c53e5d90321
      with:
        aws-region: eu-west-1
        role-duration-seconds: 3600
        # https://stackoverflow.com/questions/69247498/how-can-i-calculate-the-thumbprint-of-an-openid-connect-server
        role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/GitHubRunnerAssumedRole
        role-session-name: GitHubRunner-${{ github.repository_owner }}-SOC2-${{ github.run_number }}
    - name: After build
      if: github.repository_owner == 'Rhosys' && github.ref == 'refs/heads/main'
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
      run: node make.js after_build
    - name: Create Github Release and Tag
      if: github.repository_owner == 'Rhosys' && github.ref == 'refs/heads/main'
      run: |
        git tag $GITHUB_RUN_NUMBER
        git push origin $GITHUB_RUN_NUMBER
    
    - name: deploy build to github
      if: github.repository_owner == 'Rhosys' && github.ref == 'refs/heads/main'
      uses: JamesIves/github-pages-deploy-action@4.1.4
      with:
        branch: production
        folder: dist
        clean: true