ci.yaml

name: ci

env:
  BINARY_NAME: devx-logs-linux

on:
  pull_request:
  workflow_dispatch:
  push:
    branches:
      - main

jobs:
  cli:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: denoland/setup-deno@v1
        with:
          deno-version: v1.x
      - name: lint, test, compile
        working-directory: cli
        run: |
          deno fmt --check
          deno test
          deno task compile
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Setup Go
        uses: actions/setup-go@v4
        with:
          go-version: "1.17"
      - name: Run tests
        working-directory: ec2
        run: go test .
  upload:
    runs-on: ubuntu-latest
    needs: [test]

    # See https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token
    permissions:
      # required by guardian/actions-riff-raff@v4
      id-token: write
      contents: read
      pull-requests: write # required since guardian/actions-riff-raff@v3

    steps:
      - uses: actions/checkout@v3
      - name: Setup Go
        uses: actions/setup-go@v4
        with:
          go-version: "1.17"
      - name: Build
        working-directory: ec2
        run: |
          GOOS=linux GOARCH=arm64 go build -o $BINARY_NAME-arm64 main.go
          GOOS=linux GOARCH=amd64 go build -o $BINARY_NAME-amd64 main.go

      - uses: guardian/actions-riff-raff@v4
        with:
          app: devx-logs
          roleArn: ${{ secrets.GU_RIFF_RAFF_ROLE_ARN }}
          githubToken: ${{ secrets.GITHUB_TOKEN }}
          contentDirectories: |
            devx-logs:
              - ec2/${{ env.BINARY_NAME }}-arm64
              - ec2/${{ env.BINARY_NAME }}-amd64
          config: |
            stacks:
              - deploy
            regions:
              - eu-west-1
            allowedStages:
              - CODE
              - PROD
            deployments:
              devx-logs:
                type: aws-s3
                parameters:
                  bucket: amigo-data
                  cacheControl: private
                  publicReadAcl: false