diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c766b7e..329ee5b 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,7 +3,7 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "weekly" + interval: "daily" - package-ecosystem: "uv" directory: "/" schedule: diff --git a/.github/workflows/draft-release.yml b/.github/workflows/draft-release.yml deleted file mode 100644 index 99724a2..0000000 --- a/.github/workflows/draft-release.yml +++ /dev/null @@ -1,23 +0,0 @@ -name: Draft Release - -on: - push: - branches: - - main - -permissions: - contents: read - -jobs: - draft-release: - permissions: - contents: write - pull-requests: write - runs-on: ubuntu-latest - steps: - - uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 - with: - commitish: main - latest: true - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/label-pull-request.yml b/.github/workflows/pull-request-label.yml similarity index 100% rename from .github/workflows/label-pull-request.yml rename to .github/workflows/pull-request-label.yml diff --git a/.github/workflows/pull-request-plan-production.yml b/.github/workflows/pull-request-plan-production.yml new file mode 100644 index 0000000..2f9bdf8 --- /dev/null +++ b/.github/workflows/pull-request-plan-production.yml @@ -0,0 +1,39 @@ +name: Plan Production Environment + +on: + pull_request: + types: [opened, synchronize, reopened] + branches: [ "**" ] + +jobs: + get-tg-versions: + permissions: + contents: read + uses: launchbynttdata/launch-workflows/.github/workflows/reusable-terragrunt-versions.yml@0.2.0 + + build-matrix: + permissions: + contents: read + uses: launchbynttdata/launch-workflows/.github/workflows/reusable-github-matrix-tg.yml@0.2.0 + with: + platform_environment: production + + call-terragrunt-plan: + needs: [get-tg-versions, build-matrix] + permissions: + contents: read + id-token: write + strategy: + fail-fast: false + matrix: ${{ fromJson(needs.build-matrix.outputs.matrix) }} + + uses: launchbynttdata/launch-workflows/.github/workflows/reusable-terragrunt-plan-only.yml@0.3.0 + with: + git_branch: ${{ github.head_ref }} + tf_version: ${{ needs.get-tg-versions.outputs.tf_version }} + tg_version: ${{ needs.get-tg-versions.outputs.tg_version }} + assume_role_arn: "arn:aws:iam::159247424670:role/github-actions-deploy-role" + environment: ${{ matrix.terragrunt_environment.environment }} + region: ${{ matrix.terragrunt_environment.region }} + env_id: ${{ matrix.terragrunt_environment.instance }} + secrets: inherit diff --git a/.github/workflows/python-tests.yml b/.github/workflows/pull-request-python-tests.yml similarity index 100% rename from .github/workflows/python-tests.yml rename to .github/workflows/pull-request-python-tests.yml diff --git a/.github/workflows/release-draft.yml b/.github/workflows/release-draft.yml new file mode 100644 index 0000000..b4a7f82 --- /dev/null +++ b/.github/workflows/release-draft.yml @@ -0,0 +1,23 @@ +name: Draft Release + +on: + push: + branches: + - main + +permissions: + contents: read + +jobs: + draft-release: + permissions: + contents: write + pull-requests: write + runs-on: ubuntu-latest + steps: + - uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 + with: + commitish: main + latest: true + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/release-published.yml b/.github/workflows/release-publish.yml similarity index 100% rename from .github/workflows/release-published.yml rename to .github/workflows/release-publish.yml