mirror of
https://github.com/angular/angular
synced 2026-05-24 09:28:37 +00:00
52 lines
2.1 KiB
YAML
52 lines
2.1 KiB
YAML
# This workflow runs whenever the ADEV build workflow has completed. Deployment happens
|
|
# as part of a dedicated second workflow to avoid security issues where the building would
|
|
# otherwise occur in an authorized context where secrets could be leaked.
|
|
#
|
|
# More details can be found here:
|
|
# https://securitylab.github.com/research/github-actions-preventing-pwn-requests/.
|
|
|
|
name: Deploying adev preview to Firebase
|
|
|
|
on:
|
|
workflow_run:
|
|
workflows: ['Build adev for preview deployment']
|
|
types: [completed]
|
|
|
|
permissions:
|
|
# Needed in order to be able to comment on the pull request.
|
|
pull-requests: write
|
|
# Needed in order to checkout the repository
|
|
contents: read
|
|
# Needed in order to retrieve the artifacts from the previous job
|
|
actions: read
|
|
|
|
env:
|
|
PREVIEW_PROJECT: ng-dev-previews
|
|
PREVIEW_SITE: ng-dev-previews-fw
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
if: ${{ github.event.workflow_run.conclusion == 'success' }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
|
|
with:
|
|
token: '${{secrets.GITHUB_TOKEN}}'
|
|
persist-credentials: false
|
|
|
|
- name: Configure Firebase deploy target
|
|
working-directory: ./
|
|
run: |
|
|
# We can use `npx` as the Firebase deploy actions uses it too.
|
|
# Use stable version release
|
|
npx -y firebase-tools@15.15.0 target:clear --config adev/firebase.json --project ${{env.PREVIEW_PROJECT}} hosting angular-docs
|
|
npx -y firebase-tools@15.15.0 target:apply --config adev/firebase.json --project ${{env.PREVIEW_PROJECT}} hosting angular-docs ${{env.PREVIEW_SITE}}
|
|
|
|
- uses: angular/dev-infra/github-actions/previews/upload-artifacts-to-firebase@ba726e7bca0b08b125ccc6f93c233749e1213c17
|
|
with:
|
|
github-token: '${{secrets.GITHUB_TOKEN}}'
|
|
workflow-artifact-name: 'adev-preview'
|
|
firebase-config-dir: './adev'
|
|
firebase-public-dir: './adev/build/browser'
|
|
firebase-project-id: '${{env.PREVIEW_PROJECT}}'
|
|
firebase-service-key: '${{secrets.FIREBASE_PREVIEW_SERVICE_TOKEN}}'
|