Main

SDPLAT-26630: use GH_APP in workflows (#104) #58

	name: Main

	on:
	push:
	branches: [main]

	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true

	defaults:
	run:
	shell: bash -l {0}

	env:
	CACHE_NAME: node-modules-cache
	BUILD_CACHE_NAME: build-cache

	jobs:
	Create-NPM-Cache:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-node@v4
	with:
	node-version-file: ".nvmrc"
	registry-url: 'https://registry.npmjs.org'

	- name: Upload to Cache
	uses: actions/[email protected]
	id: npm-cache
	with:
	path: \|
	node_modules/
	key: ${{ env.CACHE_NAME }}-${{ hashFiles('package-lock.json') }}

	- name: Install dependencies
	if: ${{ steps.npm-cache.outputs.cache-hit != 'true' }}
	run: npm ci

	Build:
	permissions:
	statuses: write
	pull-requests: write
	needs: [Create-NPM-Cache]
	uses: ./.github/workflows/_build.yml
	secrets: inherit

	ReleaseDraft:
	runs-on: ubuntu-latest
	permissions:
	contents: write
	pull-requests: read
	steps:
	- uses: actions/create-github-app-token@v1
	id: app-token
	with:
	app-id: ${{ vars.GH_APP_ID }}
	private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}

	- name: Draft release notes
	uses: release-drafter/release-drafter@v6
	env:
	GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}

Provide feedback