Skip to content

[sherlock-build] generated from bda5ee71261339b5aa6d3ae98f4ca65f9de6a3cf #10

[sherlock-build] generated from bda5ee71261339b5aa6d3ae98f4ca65f9de6a3cf

[sherlock-build] generated from bda5ee71261339b5aa6d3ae98f4ca65f9de6a3cf #10

name: Deploy Webhook Proxy
on:
push:
branches:
- main
paths:
- ".github/workflows/sherlock-deploy-webhook-proxy.yaml"
- "sherlock-webhook-proxy/**"
- "sherlock-go-client/**"
- "!**/*.md"
workflow_dispatch:
concurrency:
# Don't run this workflow concurrently
group: ${{ github.workflow }}
cancel-in-progress: false
jobs:
tag-build-publish:
runs-on: ubuntu-latest
permissions:
# We use broadbot for the actual commit/push
contents: "read"
# Use OIDC for workload identity
id-token: "write"
steps:
- name: Checkout
uses: actions/checkout@v4
with:
token: ${{ secrets.BROADBOT_TOKEN }}
- name: Set up Go
uses: actions/setup-go@v5
with:
go-version-file: sherlock-webhook-proxy/go.mod
- name: Auth to GCP
uses: google-github-actions/auth@v2
with:
workload_identity_provider: 'projects/1038484894585/locations/global/workloadIdentityPools/github-wi-pool/providers/github-wi-provider'
service_account: 'sherlock-w-p-deployer@dsp-devops-super-prod.iam.gserviceaccount.com'
- name: Set up Cloud SDK
uses: google-github-actions/setup-gcloud@v2
- name: Deploy
run: make deploy-webhook-proxy
- name: Commit and push changes
uses: stefanzweifel/git-auto-commit-action@v5
with:
commit_message: |
[sherlock-deploy-webhook-proxy] generated from ${{ github.sha }}
commit_user_name: broadbot
commit_user_email: [email protected]