standalone.yml

name: Standalone DEA

#env:
#  CONFIGNAME: env${{'dev', 'test', 'prod'}}
#  STAGE: DEACFI${{github.event.pull_request.number}}
#  DOMAIN_PREFIX: deaenv${{github.event.pull_request.number}}

on:
  workflow_dispatch:

permissions:
      id-token: write   # This is required for requesting the JWT
      contents: read    # This is required for actions/checkout

jobs:
  deploy:
    env:
      CONFIGNAME: 'sandbox'
      STAGE: 'cfideasandbox'
      DOMAIN_PREFIX: 'cfideasandbox'
    environment: dea-sandbox
    defaults:
      run:
        shell: bash
        working-directory: ./source
    name: Deploy DEACFI Sandbox
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: TruffleHog OSS
        uses: trufflesecurity/trufflehog@v3.82.1
        with:
          extra_args: --only-verified                        
      - name: Install
        uses: ./.github/actions/baseAction
      - name: Rush Build
        run: |
          node common/scripts/install-run-rush.js build
      - name: configure aws credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME_SANDBOX }}
          role-session-name: GITHUBACTIONSESSION
          aws-region: ${{ secrets.AWS_REGION }}
      - name: cdk deploy
        run: |
          cd dea-main
          npm run cdk bootstrap aws://${{secrets.AWS_ACCT_NUMBER_SANDBOX}}/${{secrets.AWS_REGION}}
          npm run cdk deploy