chore(workflows): Fixing release workflows depth (#3359)

aws-amplify · Nov 9, 2023 · 1ee79bc · 1ee79bc
1 parent ae59b0a
commit 1ee79bc
Show file tree

Hide file tree

Showing 2 changed files with 120 additions and 7 deletions.
diff --git a/.github/workflows/deploy_release.yml b/.github/workflows/deploy_release.yml
@@ -10,9 +10,68 @@ permissions:
   actions: write
 
 jobs:
-  release-stable:
-    uses: ./.github/workflows/deploy_package.yml
+  build-amplify-swift:
+    name: Build Amplify package
+    uses: ./.github/workflows/build_amplify_swift_platforms.yml
     with:
-      type: release
+      identifier: 'workflow-call-build-amplify-swift'
+
+  unit-tests:
+    name: Run Plugins Unit Tests
+    uses: ./.github/workflows/unit_test.yml
+    with:
+      identifier: 'workflow-call-unit-test'
+
+  fortify:
+    name: Run Fortify Scan
+    uses: ./.github/workflows/fortify_scan.yml
     secrets: inherit
+    with:
+      identifier: 'workflow-call-fortify'
+
+  release:
+    environment: Release
+    name: Release new release version
+    needs: [unit-tests, fortify, build-amplify-swift]
+    runs-on: macos-latest
+    env:
+      GITHUB_EMAIL: [email protected]
+      GITHUB_USER: aws-amplify-ops
+    steps:
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 #v2
+        with:
+          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
+          role-session-name: ${{ format('{0}.release', github.run_id) }}
+          aws-region: ${{ secrets.AWS_REGION }}
+
+      - id: retrieve-token
+        name: Retrieve Token
+        env:
+          DEPLOY_SECRET_ARN: ${{ secrets.DEPLOY_SECRET_ARN }}
+        run: |
+          PAT=$(aws secretsmanager get-secret-value \
+          --secret-id "$DEPLOY_SECRET_ARN" \
+          | jq -r ".SecretString | fromjson | .Credential")
+          echo "token=$PAT" >> $GITHUB_OUTPUT
+
+      - name: Checkout repo
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+        with:
+          fetch-depth: 100
+          token: ${{steps.retrieve-token.outputs.token}}
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@250fcd6a742febb1123a77a841497ccaa8b9e939 # v1.152.0
+        with:
+          ruby-version: '3.2.1'
+          bundler-cache: true
+
+      - name:  Release Package
+        run: bundle exec fastlane release
 
+      - name: Release docs
+        working-directory: ${{ github.workspace }}
+        run: |
+          git checkout -B gh-pages
+          bash ./CircleciScripts/jazzy_doc_gen.sh
diff --git a/.github/workflows/deploy_unstable.yml b/.github/workflows/deploy_unstable.yml
@@ -10,8 +10,62 @@ permissions:
   actions: write
 
 jobs:
-  release-unstable:
-    uses: ./.github/workflows/deploy_package.yml
+  build-amplify-swift:
+    name: Build Amplify package
+    uses: ./.github/workflows/build_amplify_swift_platforms.yml
     with:
-      type: unstable
-    secrets: inherit
+      identifier: 'workflow-call-build-amplify-swift'
+
+  unit-tests:
+    name: Run Plugins Unit Tests
+    uses: ./.github/workflows/unit_test.yml
+    with:
+      identifier: 'workflow-call-unit-test'
+
+  fortify:
+    name: Run Fortify Scan
+    uses: ./.github/workflows/fortify_scan.yml
+    secrets: inherit
+    with:
+      identifier: 'workflow-call-fortify'
+
+  release:
+    environment: Release
+    name: Release new unstable version
+    needs: [unit-tests, fortify, build-amplify-swift]
+    runs-on: macos-latest
+    env:
+      GITHUB_EMAIL: [email protected]
+      GITHUB_USER: aws-amplify-ops
+    steps:
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 #v2
+        with:
+          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
+          role-session-name: ${{ format('{0}.release', github.run_id) }}
+          aws-region: ${{ secrets.AWS_REGION }}
+
+      - id: retrieve-token
+        name: Retrieve Token
+        env:
+          DEPLOY_SECRET_ARN: ${{ secrets.DEPLOY_SECRET_ARN }}
+        run: |
+          PAT=$(aws secretsmanager get-secret-value \
+          --secret-id "$DEPLOY_SECRET_ARN" \
+          | jq -r ".SecretString | fromjson | .Credential")
+          echo "token=$PAT" >> $GITHUB_OUTPUT
+
+      - name: Checkout repo
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+        with:
+          fetch-depth: 100
+          token: ${{steps.retrieve-token.outputs.token}}
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@250fcd6a742febb1123a77a841497ccaa8b9e939 # v1.152.0
+        with:
+          ruby-version: '3.2.1'
+          bundler-cache: true
+
+      - name:  Release Package
+        run: bundle exec fastlane unstable