Update CICD paths and archive assets

.github/workflows/deploy.yml

@@ -88,11 +88,13 @@ jobs:
           source .venv/bin/activate
           cdk synth
 
-      - name: Archive CDK Synth results
+      - name: Archive CDK Synth results (no assets)
         uses: actions/upload-artifact@v3
         with:
           name: cdk-synth-folder
-          path: ./cdk.out
+          path: !
+            ./cdk.out
+            !./cdk.out/asset.*
           retention-days: 1
 
   iac-checkov:
@@ -108,19 +110,15 @@ jobs:
           name: cdk-synth-folder
           path: ./cdk-synth-output-folder
 
-      - name: Display structure of downloaded files
-        run: ls -R
+      - name: Display files in the output folder
+        run: ls -lrta
         working-directory: ./cdk-synth-output-folder
 
-      - name: Tree Debug
-        run: |
-          tree .
-
       - name: Run Checkov action
         id: checkov
         uses: bridgecrewio/checkov-action@v12
         with:
-          directory: cdk-synth-output-folder/.cdk.out/
+          directory: cdk-synth-output-folder/
           framework: cloudformation
           soft_fail: true # optional: do not return an error code if there are failed checks
           skip_check: CKV_AWS_2 # optional: skip a specific check_id. can be comma separated list
@@ -157,8 +155,7 @@ jobs:
           node-version: "20"
 
       - name: Install CDK
-        run: |
-          npm install -g aws-cdk
+        run: npm install -g aws-cdk
 
       # # MY OLD AUTH CONFIG (NOW WITH GITHUB OIDC TOKEN)
       # - name: Configure AWS credentials
@@ -175,11 +172,6 @@ jobs:
           role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/${{ secrets.AWS_DEPLOY_ROLE }}
           role-session-name: myGitHubActions
 
-      # Sample STS get caller identity for tests
-      - name: sts get-caller-identity
-        run: |
-          aws sts get-caller-identity
-
       # NOTE: for now no manual approvals are required
       - name: Deploy to AWS
         run: |