release_authenticator.yml

name: Release Authenticator
on:
  workflow_call:
  push:
    branches: [ dev ]

permissions:
  id-token: write
  contents: write
  actions: write

jobs:
  release:
    
    name: Release new Authenticator version
    runs-on: macos-latest
    env:
      GITHUB_EMAIL: aws-amplify-ops@amazon.com
      GITHUB_USER: aws-amplify-ops
    steps:
      # - name: Configure AWS credentials
      #   uses: aws-actions/configure-aws-credentials@8c3f20df09ac63af7b3ae3d7c91f105f857d8497 #v4
      #   with:
      #     role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
      #     role-session-name: ${{ format('{0}.release', github.run_id) }}
      #     aws-region: ${{ secrets.AWS_REGION }}
      #     mask-aws-account-id: true

      # - id: retrieve-token
      #   name: Retrieve Token
      #   env:
      #     DEPLOY_SECRET_ARN: ${{ secrets.DEPLOY_SECRET_ARN }}
      #   run: |
      #     PAT=$(aws secretsmanager get-secret-value \
      #     --secret-id "$DEPLOY_SECRET_ARN" \
      #     | jq -r ".SecretString | fromjson | .Credential")
      #     echo "token=$PAT" >> $GITHUB_OUTPUT

      - name: Checkout repo
        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
        with:
          fetch-depth: 10
          #token: ${{steps.retrieve-token.outputs.token}}

      - name: Setup Ruby
        uses: ruby/setup-ruby@250fcd6a742febb1123a77a841497ccaa8b9e939 # v1.152.0
        with:
          ruby-version: '3.2.1'
          bundler-cache: true

      - name:  Release Authenticator
        run: bundle exec fastlane release