Skip to content

chore(ci): update deploy workflows - #6018

Merged
0xcadams merged 3 commits into
mainfrom
0xcadams/ci-deploy-workflows
May 19, 2026
Merged

chore(ci): update deploy workflows#6018
0xcadams merged 3 commits into
mainfrom
0xcadams/ci-deploy-workflows

Conversation

@0xcadams

@0xcadams 0xcadams commented May 19, 2026

Copy link
Copy Markdown
Member

Refreshes the deploy workflows by splitting package preparation into a separate build job and passing the generated package artifact into the deploy job. Deploy jobs now use GitHub OIDC to assume environment-specific AWS roles, install only deploy-time dependencies, and remove the unused root build helper script.

@vercel

vercel Bot commented May 19, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
replicache-docs Ready Ready Preview, Comment May 19, 2026 7:39am
zbugs Ready Ready Preview, Comment May 19, 2026 7:39am

Request Review

@socket-security

socket-security Bot commented May 19, 2026

Copy link
Copy Markdown

@arv arv left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

ZERO_ADMIN_PASSWORD: ${{ secrets.ZERO_ADMIN_PASSWORD }}
run: |
cd prod/sst
npm install

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🥇

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This line looked suspicious

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removing this npm install breaks the package deps, but I think we should fix this with pnpm workspaces and not add back an npm install after AWS creds are present

- name: Set up Docker
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
- name: Build packages
run: npx turbo run build

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

npm run build

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was worried about prebuild/postbuild tasks automatically running in this context.

uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
with:
node-version: 24.x
package-manager-cache: false

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍


jobs:
deploy:
build:

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I wonder if it would make sense to DRY this with our own .github/actions/

@0xcadams
0xcadams added this pull request to the merge queue May 19, 2026
@0xcadams
0xcadams removed this pull request from the merge queue due to a manual request May 19, 2026
@0xcadams
0xcadams merged commit c37ac92 into main May 19, 2026
26 checks passed
@0xcadams
0xcadams deleted the 0xcadams/ci-deploy-workflows branch May 19, 2026 07:54
arv pushed a commit that referenced this pull request May 19, 2026
Refreshes the deploy workflows by splitting package preparation into a
separate build job and passing the generated package artifact into the
deploy job. Deploy jobs now use GitHub OIDC to assume
environment-specific AWS roles, install only deploy-time dependencies,
and remove the unused root build helper script.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants