From c597750dccb5beeee0d8ec154edc4d4d8c5a5512 Mon Sep 17 00:00:00 2001
From: Adrian Smijulj <adrian1358@gmail.com>
Date: Fri, 29 Nov 2024 10:23:27 +0100
Subject: [PATCH 1/8] fix: enable groups/teams auth via `getIdentity` (#4418)

---
 .../api-security-cognito/src/createCognito.ts |  28 +++-
 .../src/createGroupAuthorizer.ts              |  25 ----
 .../src/utils/createGroupsTeamsAuthorizer.ts  | 126 ++++++++++--------
 3 files changed, 91 insertions(+), 88 deletions(-)
 delete mode 100644 packages/api-security-cognito/src/createGroupAuthorizer.ts

diff --git a/packages/api-security-cognito/src/createCognito.ts b/packages/api-security-cognito/src/createCognito.ts
index bdebf90019d..952f75e3aec 100644
--- a/packages/api-security-cognito/src/createCognito.ts
+++ b/packages/api-security-cognito/src/createCognito.ts
@@ -5,7 +5,7 @@ import {
     Config as CognitoConfig,
     TokenData
 } from "@webiny/api-cognito-authenticator";
-import { createGroupAuthorizer } from "~/createGroupAuthorizer";
+import { createGroupsTeamsAuthorizerHandler } from "@webiny/api-security";
 import { CoreContext } from "~/types";
 import { createAdminUsersHooks } from "./createAdminUsersHooks";
 import adminUsersGqlPlugins from "./graphql/user.gql";
@@ -24,7 +24,9 @@ interface GetPermissionsParams<TContext> {
 
 interface Config<TContext, TToken, TIdentity> extends CognitoConfig {
     identityType: string;
+
     getIdentity?(params: GetIdentityParams<TContext, TToken, TIdentity>): TIdentity;
+
     getPermissions?(params: GetPermissionsParams<TContext>): Promise<SecurityPermission[] | null>;
 }
 
@@ -33,9 +35,26 @@ export interface CognitoTokenData extends TokenData {
     family_name: string;
     email: string;
     "custom:id": string;
+
     [key: string]: any;
 }
 
+const mustAddGroupsTeamsAuthorizer = (identity: SecurityIdentity) => {
+    if ("group" in identity) {
+        return true;
+    }
+
+    if ("groups" in identity) {
+        return true;
+    }
+
+    if ("team" in identity) {
+        return true;
+    }
+
+    return "teams" in identity;
+};
+
 export const createCognito = <
     TContext extends CoreContext = CoreContext,
     TToken extends CognitoTokenData = CognitoTokenData,
@@ -77,10 +96,9 @@ export const createCognito = <
                         context
                     });
 
-                    if (customIdentity.group) {
-                        context.security.addAuthorizer(
-                            createGroupAuthorizer(context, customIdentity.group)
-                        );
+                    if (mustAddGroupsTeamsAuthorizer(customIdentity)) {
+                        const authorizer = createGroupsTeamsAuthorizerHandler(config, context);
+                        context.security.addAuthorizer(authorizer);
                     }
 
                     return customIdentity;
diff --git a/packages/api-security-cognito/src/createGroupAuthorizer.ts b/packages/api-security-cognito/src/createGroupAuthorizer.ts
deleted file mode 100644
index 7e6d1e8d9ce..00000000000
--- a/packages/api-security-cognito/src/createGroupAuthorizer.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { getPermissionsFromSecurityGroupsForLocale } from "@webiny/api-security";
-import { CoreContext } from "~/types";
-
-export const createGroupAuthorizer = (context: CoreContext, groupSlug: string) => {
-    return async () => {
-        return context.security.withoutAuthorization(async () => {
-            const tenant = context.tenancy.getCurrentTenant();
-            const locale = context.i18n?.getContentLocale();
-
-            if (!locale) {
-                return null;
-            }
-
-            const group = await context.security.getGroup({
-                where: { slug: groupSlug, tenant: tenant.id }
-            });
-
-            if (group) {
-                return getPermissionsFromSecurityGroupsForLocale([group], locale.code);
-            }
-
-            return null;
-        });
-    };
-};
diff --git a/packages/api-security/src/utils/createGroupsTeamsAuthorizer.ts b/packages/api-security/src/utils/createGroupsTeamsAuthorizer.ts
index bddfbdba150..caea648ea24 100644
--- a/packages/api-security/src/utils/createGroupsTeamsAuthorizer.ts
+++ b/packages/api-security/src/utils/createGroupsTeamsAuthorizer.ts
@@ -7,78 +7,88 @@ import {
 
 export type { GroupsTeamsAuthorizerConfig };
 
-export const createGroupsTeamsAuthorizer = <TContext extends SecurityContext = SecurityContext>(
-    config: GroupsTeamsAuthorizerConfig<TContext>
+export const createGroupsTeamsAuthorizerHandler = <
+    TContext extends SecurityContext = SecurityContext
+>(
+    config: GroupsTeamsAuthorizerConfig<TContext>,
+    context: TContext
 ) => {
-    return new ContextPlugin<TContext>(context => {
+    return async () => {
         const { security, tenancy } = context;
-        security.addAuthorizer(async () => {
-            const identity = security.getIdentity();
-            if (!identity) {
-                return null;
-            }
+        const identity = security.getIdentity();
+        if (!identity) {
+            return null;
+        }
 
-            // If `identityType` is specified, we'll only execute this authorizer for a matching identity.
-            if (config.identityType && identity.type !== config.identityType) {
-                return null;
-            }
+        // If `identityType` is specified, we'll only execute this authorizer for a matching identity.
+        if (config.identityType && identity.type !== config.identityType) {
+            return null;
+        }
 
-            // @ts-expect-error Check `packages/api-security/src/plugins/tenantLinkAuthorization.ts:23`.
-            const locale = context.i18n?.getContentLocale();
-            if (!locale) {
-                return null;
-            }
+        // @ts-expect-error Check `packages/api-security/src/plugins/tenantLinkAuthorization.ts:23`.
+        const locale = context.i18n?.getContentLocale();
+        if (!locale) {
+            return null;
+        }
 
-            if (config.canAccessTenant) {
-                const canAccessTenant = await config.canAccessTenant(context);
-                if (!canAccessTenant) {
-                    return [];
-                }
+        if (config.canAccessTenant) {
+            const canAccessTenant = await config.canAccessTenant(context);
+            if (!canAccessTenant) {
+                return [];
             }
+        }
 
-            const currentTenantPermissions = await listPermissionsFromGroupsAndTeams<TContext>({
-                config,
-                context,
-                identity,
-                localeCode: locale.code
-            });
+        const currentTenantPermissions = await listPermissionsFromGroupsAndTeams<TContext>({
+            config,
+            context,
+            identity,
+            localeCode: locale.code
+        });
 
-            if (Array.isArray(currentTenantPermissions)) {
-                return currentTenantPermissions;
-            }
+        if (Array.isArray(currentTenantPermissions)) {
+            return currentTenantPermissions;
+        }
 
-            // If no security groups were found, it could be due to an identity accessing a sub-tenant. In this case,
-            // let's try loading permissions from the parent tenant. Note that this will work well for flat tenant
-            // hierarchy where there's a `root` tenant and 1 level of sibling sub-tenants. For multi-level hierarchy,
-            // the best approach is to code a plugin with the desired permissions-fetching logic.
-            if (config.inheritGroupsFromParentTenant === false) {
-                return null;
-            }
+        // If no security groups were found, it could be due to an identity accessing a sub-tenant. In this case,
+        // let's try loading permissions from the parent tenant. Note that this will work well for flat tenant
+        // hierarchy where there's a `root` tenant and 1 level of sibling sub-tenants. For multi-level hierarchy,
+        // the best approach is to code a plugin with the desired permissions-fetching logic.
+        if (config.inheritGroupsFromParentTenant === false) {
+            return null;
+        }
 
-            const parentTenantId = context.tenancy.getCurrentTenant().parent;
-            if (!parentTenantId) {
-                return null;
-            }
+        const parentTenantId = context.tenancy.getCurrentTenant().parent;
+        if (!parentTenantId) {
+            return null;
+        }
 
-            const parentTenant = await tenancy.getTenantById(parentTenantId);
-            if (!parentTenant) {
-                return null;
-            }
+        const parentTenant = await tenancy.getTenantById(parentTenantId);
+        if (!parentTenant) {
+            return null;
+        }
 
-            const parentTenantPermissions = await tenancy.withTenant(parentTenant, async () => {
-                return listPermissionsFromGroupsAndTeams({
-                    config,
-                    context,
-                    identity,
-                    localeCode: locale.code
-                });
+        const parentTenantPermissions = await tenancy.withTenant(parentTenant, async () => {
+            return listPermissionsFromGroupsAndTeams({
+                config,
+                context,
+                identity,
+                localeCode: locale.code
             });
+        });
 
-            if (Array.isArray(parentTenantPermissions)) {
-                return parentTenantPermissions;
-            }
+        if (Array.isArray(parentTenantPermissions)) {
+            return parentTenantPermissions;
+        }
 
-            return null;
-        });
+        return null;
+    };
+};
+
+export const createGroupsTeamsAuthorizer = <TContext extends SecurityContext = SecurityContext>(
+    config: GroupsTeamsAuthorizerConfig<TContext>
+) => {
+    return new ContextPlugin<TContext>(context => {
+        const gcc = createGroupsTeamsAuthorizerHandler(config, context);
+        context.security.addAuthorizer(gcc);
     });
 };

From 26228a1f41bb55ecd8012ec6f06afea36b9c54d7 Mon Sep 17 00:00:00 2001
From: Adrian Smijulj <adrian1358@gmail.com>
Date: Fri, 29 Nov 2024 11:48:04 +0100
Subject: [PATCH 2/8] fix: correct loading of groups from teams (#4419)

---
 .../listPermissionsFromGroupsAndTeams.ts      | 59 +++++++++++++------
 1 file changed, 42 insertions(+), 17 deletions(-)

diff --git a/packages/api-security/src/utils/createGroupsTeamsAuthorizer/listPermissionsFromGroupsAndTeams.ts b/packages/api-security/src/utils/createGroupsTeamsAuthorizer/listPermissionsFromGroupsAndTeams.ts
index 6859668ffa3..86e31d8c0c8 100644
--- a/packages/api-security/src/utils/createGroupsTeamsAuthorizer/listPermissionsFromGroupsAndTeams.ts
+++ b/packages/api-security/src/utils/createGroupsTeamsAuthorizer/listPermissionsFromGroupsAndTeams.ts
@@ -1,5 +1,5 @@
 import { getPermissionsFromSecurityGroupsForLocale } from "../getPermissionsFromSecurityGroupsForLocale";
-import { SecurityContext } from "~/types";
+import { SecurityContext, SecurityRole } from "~/types";
 import { Identity } from "@webiny/api-authentication/types";
 
 export type GroupSlug = string | undefined;
@@ -63,6 +63,24 @@ export const listPermissionsFromGroupsAndTeams = async <
         groupSlugs.push(...identity.groups);
     }
 
+    const filteredGroupSlugs = groupSlugs.filter(Boolean) as string[];
+    const dedupedGroupSlugs = Array.from(new Set(filteredGroupSlugs));
+
+    const loadedGroups: SecurityRole[] = [];
+
+    if (dedupedGroupSlugs.length > 0) {
+        // Load groups coming from teams.
+        const loadedGroupsBySlugs = await security.withoutAuthorization(() => {
+            return security.listGroups({
+                where: { slug_in: dedupedGroupSlugs }
+            });
+        });
+
+        if (loadedGroupsBySlugs.length > 0) {
+            loadedGroups.push(...loadedGroupsBySlugs);
+        }
+    }
+
     if (wcp.canUseTeams()) {
         // Load groups coming from teams.
         if (identity.team) {
@@ -83,26 +101,33 @@ export const listPermissionsFromGroupsAndTeams = async <
                 });
             });
 
-            const groupSlugsFromTeams = loadedTeams.map(team => team.groups).flat();
-            groupSlugs.push(...groupSlugsFromTeams);
-        }
-    }
-
-    const filteredGroupSlugs = groupSlugs.filter(Boolean) as string[];
-    const dedupedGroupSlugs = Array.from(new Set(filteredGroupSlugs));
+            // Upon returning group IDs from teams, we're also filtering out groups that were already loaded.
+            // Also note that `team.groups` contains group IDs, not slugs. Hence, we need to load groups by IDs.
+            const groupIdsFromTeams = loadedTeams
+                .map(team => team.groups)
+                .flat()
+                .filter(groupId => {
+                    const alreadyLoaded = loadedGroups.find(group => group.id === groupId);
+                    return !alreadyLoaded;
+                });
 
-    if (dedupedGroupSlugs.length > 0) {
-        // Load groups coming from teams.
-        const loadedGroups = await security.withoutAuthorization(() => {
-            return security.listGroups({
-                where: { slug_in: dedupedGroupSlugs }
-            });
-        });
+            if (groupIdsFromTeams.length > 0) {
+                const loadedGroupsFromTeams = await security.withoutAuthorization(() => {
+                    return security.listGroups({
+                        where: { id_in: groupIdsFromTeams }
+                    });
+                });
 
-        if (loadedGroups.length > 0) {
-            return getPermissionsFromSecurityGroupsForLocale(loadedGroups, localeCode);
+                if (loadedGroupsFromTeams.length > 0) {
+                    loadedGroups.push(...loadedGroupsFromTeams);
+                }
+            }
         }
     }
 
+    if (loadedGroups.length > 0) {
+        return getPermissionsFromSecurityGroupsForLocale(loadedGroups, localeCode);
+    }
+
     return null;
 };

From 4ef2983e4124f8e72e00d6842b5ee3ede8994aec Mon Sep 17 00:00:00 2001
From: Adrian Smijulj <adrian1358@gmail.com>
Date: Fri, 29 Nov 2024 11:49:39 +0100
Subject: [PATCH 3/8] fix: correct filtering with the `slug_in` operator
 (#4420)

---
 packages/api-security-so-ddb/src/index.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/api-security-so-ddb/src/index.ts b/packages/api-security-so-ddb/src/index.ts
index 2796b745228..c900f2e9261 100644
--- a/packages/api-security-so-ddb/src/index.ts
+++ b/packages/api-security-so-ddb/src/index.ts
@@ -469,7 +469,7 @@ export const createStorageOperations = (
             }
 
             if (Array.isArray(slug_in)) {
-                return items.filter(item => slug_in.includes(item.id));
+                return items.filter(item => slug_in.includes(item.slug));
             }
             return items;
         },

From ff5f3a2431623ef31920b84e2973e90dedaa9e31 Mon Sep 17 00:00:00 2001
From: adrians5j <adrian@webiny.com>
Date: Fri, 29 Nov 2024 11:56:02 +0100
Subject: [PATCH 4/8] ci: print deployment summary

---
 .../workflows/pullRequestsCommandCypress.yml  | 15 +++++++++++---
 .github/workflows/pushDev.yml                 | 15 +++++++++++---
 .github/workflows/pushNext.yml                | 15 +++++++++++---
 .../wac/steps/createDeployWebinySteps.ts      |  4 +++-
 .../printProjectSetupSummary.js               | 20 +++++++++++++++++++
 5 files changed, 59 insertions(+), 10 deletions(-)
 create mode 100644 .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js

diff --git a/.github/workflows/pullRequestsCommandCypress.yml b/.github/workflows/pullRequestsCommandCypress.yml
index f16ac3cc457..9f6579e8b10 100644
--- a/.github/workflows/pullRequestsCommandCypress.yml
+++ b/.github/workflows/pullRequestsCommandCypress.yml
@@ -286,7 +286,10 @@ jobs:
         run: yarn webiny deploy apps/website --env dev
       - name: Instance Info
         working-directory: new-webiny-project
-        run: yarn webiny info --env dev >> $GITHUB_STEP_SUMMARY
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
+          '' >> $GITHUB_STEP_SUMMARY"
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
@@ -518,7 +521,10 @@ jobs:
         run: yarn webiny deploy apps/website --env dev
       - name: Instance Info
         working-directory: new-webiny-project
-        run: yarn webiny info --env dev >> $GITHUB_STEP_SUMMARY
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
+          '' >> $GITHUB_STEP_SUMMARY"
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
@@ -755,7 +761,10 @@ jobs:
         run: yarn webiny deploy apps/website --env dev
       - name: Instance Info
         working-directory: new-webiny-project
-        run: yarn webiny info --env dev >> $GITHUB_STEP_SUMMARY
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
+          '' >> $GITHUB_STEP_SUMMARY"
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
diff --git a/.github/workflows/pushDev.yml b/.github/workflows/pushDev.yml
index fb3a63824a6..4e58d3e5a92 100644
--- a/.github/workflows/pushDev.yml
+++ b/.github/workflows/pushDev.yml
@@ -589,7 +589,10 @@ jobs:
         run: yarn webiny deploy apps/website --env dev
       - name: Instance Info
         working-directory: new-webiny-project
-        run: yarn webiny info --env dev >> $GITHUB_STEP_SUMMARY
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
+          '' >> $GITHUB_STEP_SUMMARY"
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
@@ -799,7 +802,10 @@ jobs:
         run: yarn webiny deploy apps/website --env dev
       - name: Instance Info
         working-directory: new-webiny-project
-        run: yarn webiny info --env dev >> $GITHUB_STEP_SUMMARY
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
+          '' >> $GITHUB_STEP_SUMMARY"
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
@@ -1014,7 +1020,10 @@ jobs:
         run: yarn webiny deploy apps/website --env dev
       - name: Instance Info
         working-directory: new-webiny-project
-        run: yarn webiny info --env dev >> $GITHUB_STEP_SUMMARY
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
+          '' >> $GITHUB_STEP_SUMMARY"
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
diff --git a/.github/workflows/pushNext.yml b/.github/workflows/pushNext.yml
index af37bc6b521..037f26deac7 100644
--- a/.github/workflows/pushNext.yml
+++ b/.github/workflows/pushNext.yml
@@ -589,7 +589,10 @@ jobs:
         run: yarn webiny deploy apps/website --env dev
       - name: Instance Info
         working-directory: new-webiny-project
-        run: yarn webiny info --env dev >> $GITHUB_STEP_SUMMARY
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
+          '' >> $GITHUB_STEP_SUMMARY"
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
@@ -799,7 +802,10 @@ jobs:
         run: yarn webiny deploy apps/website --env dev
       - name: Instance Info
         working-directory: new-webiny-project
-        run: yarn webiny info --env dev >> $GITHUB_STEP_SUMMARY
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
+          '' >> $GITHUB_STEP_SUMMARY"
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
@@ -1014,7 +1020,10 @@ jobs:
         run: yarn webiny deploy apps/website --env dev
       - name: Instance Info
         working-directory: new-webiny-project
-        run: yarn webiny info --env dev >> $GITHUB_STEP_SUMMARY
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
+          '' >> $GITHUB_STEP_SUMMARY"
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
diff --git a/.github/workflows/wac/steps/createDeployWebinySteps.ts b/.github/workflows/wac/steps/createDeployWebinySteps.ts
index baf83f29b24..cbd5c246e1c 100644
--- a/.github/workflows/wac/steps/createDeployWebinySteps.ts
+++ b/.github/workflows/wac/steps/createDeployWebinySteps.ts
@@ -1,3 +1,5 @@
+import { runNodeScript } from "../utils";
+
 export const createDeployWebinySteps = ({ workingDirectory = "dev" } = {}) => {
     return [
         {
@@ -23,7 +25,7 @@ export const createDeployWebinySteps = ({ workingDirectory = "dev" } = {}) => {
         {
             name: "Instance Info",
             "working-directory": workingDirectory,
-            run: "yarn webiny info --env dev >> $GITHUB_STEP_SUMMARY"
+            run: `${runNodeScript("printProjectSetupSummary")} >> $GITHUB_STEP_SUMMARY"`
         }
     ];
 };
diff --git a/.github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js b/.github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
new file mode 100644
index 00000000000..03a318d1d25
--- /dev/null
+++ b/.github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
@@ -0,0 +1,20 @@
+// Since this script is always run after a project deployment, we can be sure
+// `getStackOutput` function is available and ready to use.
+const { getStackOutput } = require("@webiny/cli-plugin-deploy-pulumi/utils");
+
+const adminStackOutput = getStackOutput({
+    folder: "apps/admin",
+    env: "dev"
+});
+
+const websiteStackOutput = getStackOutput({
+    folder: "apps/website",
+    env: "dev"
+});
+
+console.log(`### Deployment Summary
+| App | URL |
+|-|----|
+| Admin Area | [${adminStackOutput.appUrl}](${adminStackOutput.appUrl}) |
+| Website | [${websiteStackOutput.appUrl}](${websiteStackOutput.appUrl}) |
+`);

From 0d8b6bd0417734e4f617ad48af78b37f10e8fb24 Mon Sep 17 00:00:00 2001
From: adrians5j <adrian@webiny.com>
Date: Fri, 29 Nov 2024 12:12:19 +0100
Subject: [PATCH 5/8] ci: print deployment summary

---
 .github/workflows/pullRequestsCommandCypress.yml       | 6 +++---
 .github/workflows/pushDev.yml                          | 6 +++---
 .github/workflows/pushNext.yml                         | 6 +++---
 .github/workflows/wac/steps/createDeployWebinySteps.ts | 2 +-
 4 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/pullRequestsCommandCypress.yml b/.github/workflows/pullRequestsCommandCypress.yml
index 9f6579e8b10..114beb610d9 100644
--- a/.github/workflows/pullRequestsCommandCypress.yml
+++ b/.github/workflows/pullRequestsCommandCypress.yml
@@ -289,7 +289,7 @@ jobs:
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY"
+          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
@@ -524,7 +524,7 @@ jobs:
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY"
+          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
@@ -764,7 +764,7 @@ jobs:
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY"
+          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
diff --git a/.github/workflows/pushDev.yml b/.github/workflows/pushDev.yml
index 4e58d3e5a92..d0003ec0036 100644
--- a/.github/workflows/pushDev.yml
+++ b/.github/workflows/pushDev.yml
@@ -592,7 +592,7 @@ jobs:
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY"
+          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
@@ -805,7 +805,7 @@ jobs:
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY"
+          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
@@ -1023,7 +1023,7 @@ jobs:
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY"
+          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
diff --git a/.github/workflows/pushNext.yml b/.github/workflows/pushNext.yml
index 037f26deac7..37a5de33f95 100644
--- a/.github/workflows/pushNext.yml
+++ b/.github/workflows/pushNext.yml
@@ -592,7 +592,7 @@ jobs:
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY"
+          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
@@ -805,7 +805,7 @@ jobs:
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY"
+          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
@@ -1023,7 +1023,7 @@ jobs:
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY"
+          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
diff --git a/.github/workflows/wac/steps/createDeployWebinySteps.ts b/.github/workflows/wac/steps/createDeployWebinySteps.ts
index cbd5c246e1c..64920d3ec3e 100644
--- a/.github/workflows/wac/steps/createDeployWebinySteps.ts
+++ b/.github/workflows/wac/steps/createDeployWebinySteps.ts
@@ -25,7 +25,7 @@ export const createDeployWebinySteps = ({ workingDirectory = "dev" } = {}) => {
         {
             name: "Instance Info",
             "working-directory": workingDirectory,
-            run: `${runNodeScript("printProjectSetupSummary")} >> $GITHUB_STEP_SUMMARY"`
+            run: `${runNodeScript("printProjectSetupSummary")} >> $GITHUB_STEP_SUMMARY`
         }
     ];
 };

From 25baff8cf78de180ef3f4b7ea4ce4c19b35d9649 Mon Sep 17 00:00:00 2001
From: adrians5j <adrian@webiny.com>
Date: Fri, 29 Nov 2024 13:13:48 +0100
Subject: [PATCH 6/8] ci: print deployment summary

---
 .../workflows/pullRequestsCommandCypress.yml   | 18 ------------------
 .github/workflows/pushDev.yml                  | 18 ------------------
 .github/workflows/pushNext.yml                 | 18 ------------------
 .../wac/steps/createDeployWebinySteps.ts       |  7 -------
 4 files changed, 61 deletions(-)

diff --git a/.github/workflows/pullRequestsCommandCypress.yml b/.github/workflows/pullRequestsCommandCypress.yml
index 114beb610d9..6e5ce2f75e1 100644
--- a/.github/workflows/pullRequestsCommandCypress.yml
+++ b/.github/workflows/pullRequestsCommandCypress.yml
@@ -284,12 +284,6 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
-      - name: Instance Info
-        working-directory: new-webiny-project
-        run: >-
-          node
-          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
@@ -519,12 +513,6 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
-      - name: Instance Info
-        working-directory: new-webiny-project
-        run: >-
-          node
-          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
@@ -759,12 +747,6 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
-      - name: Instance Info
-        working-directory: new-webiny-project
-        run: >-
-          node
-          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
diff --git a/.github/workflows/pushDev.yml b/.github/workflows/pushDev.yml
index d0003ec0036..2a1e180ecb8 100644
--- a/.github/workflows/pushDev.yml
+++ b/.github/workflows/pushDev.yml
@@ -587,12 +587,6 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
-      - name: Instance Info
-        working-directory: new-webiny-project
-        run: >-
-          node
-          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
@@ -800,12 +794,6 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
-      - name: Instance Info
-        working-directory: new-webiny-project
-        run: >-
-          node
-          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
@@ -1018,12 +1006,6 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
-      - name: Instance Info
-        working-directory: new-webiny-project
-        run: >-
-          node
-          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
diff --git a/.github/workflows/pushNext.yml b/.github/workflows/pushNext.yml
index 37a5de33f95..de490160ccb 100644
--- a/.github/workflows/pushNext.yml
+++ b/.github/workflows/pushNext.yml
@@ -587,12 +587,6 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
-      - name: Instance Info
-        working-directory: new-webiny-project
-        run: >-
-          node
-          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
@@ -800,12 +794,6 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
-      - name: Instance Info
-        working-directory: new-webiny-project
-        run: >-
-          node
-          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
@@ -1018,12 +1006,6 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
-      - name: Instance Info
-        working-directory: new-webiny-project
-        run: >-
-          node
-          .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
-          '' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
diff --git a/.github/workflows/wac/steps/createDeployWebinySteps.ts b/.github/workflows/wac/steps/createDeployWebinySteps.ts
index 64920d3ec3e..208fd429e76 100644
--- a/.github/workflows/wac/steps/createDeployWebinySteps.ts
+++ b/.github/workflows/wac/steps/createDeployWebinySteps.ts
@@ -1,5 +1,3 @@
-import { runNodeScript } from "../utils";
-
 export const createDeployWebinySteps = ({ workingDirectory = "dev" } = {}) => {
     return [
         {
@@ -21,11 +19,6 @@ export const createDeployWebinySteps = ({ workingDirectory = "dev" } = {}) => {
             name: "Deploy Website",
             "working-directory": workingDirectory,
             run: "yarn webiny deploy apps/website --env dev"
-        },
-        {
-            name: "Instance Info",
-            "working-directory": workingDirectory,
-            run: `${runNodeScript("printProjectSetupSummary")} >> $GITHUB_STEP_SUMMARY`
         }
     ];
 };

From f1b37076082f74706381dfa579a88b32b15cda19 Mon Sep 17 00:00:00 2001
From: adrians5j <adrian@webiny.com>
Date: Fri, 29 Nov 2024 13:21:43 +0100
Subject: [PATCH 7/8] ci: print deployment summary

---
 .../workflows/pullRequestsCommandCypress.yml   | 18 ++++++++++++++++++
 .github/workflows/pushDev.yml                  | 18 ++++++++++++++++++
 .github/workflows/pushNext.yml                 | 18 ++++++++++++++++++
 .../wac/pullRequestsCommandCypress.wac.ts      | 16 +++++++++++++++-
 .github/workflows/wac/push.wac.ts              | 10 +++++++++-
 ...tupSummary.js => printDeploymentSummary.js} | 12 ++++++++----
 6 files changed, 86 insertions(+), 6 deletions(-)
 rename .github/workflows/wac/utils/runNodeScripts/{printProjectSetupSummary.js => printDeploymentSummary.js} (64%)

diff --git a/.github/workflows/pullRequestsCommandCypress.yml b/.github/workflows/pullRequestsCommandCypress.yml
index 6e5ce2f75e1..b59f94bbd98 100644
--- a/.github/workflows/pullRequestsCommandCypress.yml
+++ b/.github/workflows/pullRequestsCommandCypress.yml
@@ -284,6 +284,12 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
+      - name: Deployment Summary
+        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
+          '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
@@ -513,6 +519,12 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
+      - name: Deployment Summary
+        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
+          '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
@@ -747,6 +759,12 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
+      - name: Deployment Summary
+        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
+          '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
       - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: yarn setup-cypress --projectFolder ../new-webiny-project
diff --git a/.github/workflows/pushDev.yml b/.github/workflows/pushDev.yml
index 2a1e180ecb8..7067748eda0 100644
--- a/.github/workflows/pushDev.yml
+++ b/.github/workflows/pushDev.yml
@@ -587,6 +587,12 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
+      - name: Deployment Summary
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
+          '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
+        working-directory: dev
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
@@ -794,6 +800,12 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
+      - name: Deployment Summary
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
+          '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
+        working-directory: dev
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
@@ -1006,6 +1018,12 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
+      - name: Deployment Summary
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
+          '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
+        working-directory: dev
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: dev
diff --git a/.github/workflows/pushNext.yml b/.github/workflows/pushNext.yml
index de490160ccb..1f85febe59f 100644
--- a/.github/workflows/pushNext.yml
+++ b/.github/workflows/pushNext.yml
@@ -587,6 +587,12 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
+      - name: Deployment Summary
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
+          '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
+        working-directory: next
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
@@ -794,6 +800,12 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
+      - name: Deployment Summary
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
+          '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
+        working-directory: next
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
@@ -1006,6 +1018,12 @@ jobs:
       - name: Deploy Website
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
+      - name: Deployment Summary
+        run: >-
+          node
+          .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
+          '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
+        working-directory: next
       - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
         working-directory: next
diff --git a/.github/workflows/wac/pullRequestsCommandCypress.wac.ts b/.github/workflows/wac/pullRequestsCommandCypress.wac.ts
index 4cdc9a649d4..b773d1657ef 100644
--- a/.github/workflows/wac/pullRequestsCommandCypress.wac.ts
+++ b/.github/workflows/wac/pullRequestsCommandCypress.wac.ts
@@ -7,7 +7,13 @@ import {
     createGlobalBuildCacheSteps,
     createRunBuildCacheSteps
 } from "./steps";
-import { NODE_OPTIONS, NODE_VERSION, BUILD_PACKAGES_RUNNER, AWS_REGION } from "./utils";
+import {
+    NODE_OPTIONS,
+    NODE_VERSION,
+    BUILD_PACKAGES_RUNNER,
+    AWS_REGION,
+    runNodeScript
+} from "./utils";
 import { createJob, createValidateWorkflowsJob } from "./jobs";
 
 // Will print "next" or "dev". Important for caching (via actions/cache).
@@ -147,6 +153,14 @@ const createCypressJobs = (dbSetup: string) => {
                 }
             },
             ...createDeployWebinySteps({ workingDirectory: DIR_TEST_PROJECT }),
+            {
+                name: "Deployment Summary",
+                "working-directory": DIR_WEBINY_JS,
+                run: `${runNodeScript(
+                    "printDeploymentSummary",
+                    `../${DIR_TEST_PROJECT}`
+                )} >> $GITHUB_STEP_SUMMARY`
+            },
             {
                 name: "Create Cypress config",
                 "working-directory": DIR_WEBINY_JS,
diff --git a/.github/workflows/wac/push.wac.ts b/.github/workflows/wac/push.wac.ts
index 504758d830f..e659a9beea6 100644
--- a/.github/workflows/wac/push.wac.ts
+++ b/.github/workflows/wac/push.wac.ts
@@ -3,7 +3,8 @@ import {
     AWS_REGION,
     BUILD_PACKAGES_RUNNER,
     listPackagesWithJestTests,
-    NODE_VERSION
+    NODE_VERSION,
+    runNodeScript
 } from "./utils";
 import { createJob } from "./jobs";
 import {
@@ -157,6 +158,13 @@ const createPushWorkflow = (branchName: string) => {
                 ...createDeployWebinySteps({ workingDirectory: DIR_TEST_PROJECT }),
                 ...withCommonParams(
                     [
+                        {
+                            name: "Deployment Summary",
+                            run: `${runNodeScript(
+                                "printDeploymentSummary",
+                                `../${DIR_TEST_PROJECT}`
+                            )} >> $GITHUB_STEP_SUMMARY`
+                        },
                         {
                             name: "Create Cypress config",
                             run: `yarn setup-cypress --projectFolder ../${DIR_TEST_PROJECT}`
diff --git a/.github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js b/.github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
similarity index 64%
rename from .github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
rename to .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
index 03a318d1d25..c28ef511e3f 100644
--- a/.github/workflows/wac/utils/runNodeScripts/printProjectSetupSummary.js
+++ b/.github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
@@ -1,15 +1,19 @@
-// Since this script is always run after a project deployment, we can be sure
-// `getStackOutput` function is available and ready to use.
+// This script can only be run if we previously checked out the project and installed all dependencies.
 const { getStackOutput } = require("@webiny/cli-plugin-deploy-pulumi/utils");
 
+const args = process.argv.slice(2); // Removes the first two elements
+const [cwd] = args;
+
 const adminStackOutput = getStackOutput({
     folder: "apps/admin",
-    env: "dev"
+    env: "dev",
+    cwd
 });
 
 const websiteStackOutput = getStackOutput({
     folder: "apps/website",
-    env: "dev"
+    env: "dev",
+    cwd
 });
 
 console.log(`### Deployment Summary

From fef791e135734f609762275c584ef39a65d1f489 Mon Sep 17 00:00:00 2001
From: adrians5j <adrian@webiny.com>
Date: Fri, 29 Nov 2024 13:25:21 +0100
Subject: [PATCH 8/8] ci: print deployment summary

---
 .../workflows/pullRequestsCommandCypress.yml  | 60 +++++++++----------
 .../wac/pullRequestsCommandCypress.wac.ts     | 54 +++++++++--------
 .github/workflows/wac/push.wac.ts             |  8 +--
 3 files changed, 61 insertions(+), 61 deletions(-)

diff --git a/.github/workflows/pullRequestsCommandCypress.yml b/.github/workflows/pullRequestsCommandCypress.yml
index b59f94bbd98..712e3e661d0 100644
--- a/.github/workflows/pullRequestsCommandCypress.yml
+++ b/.github/workflows/pullRequestsCommandCypress.yml
@@ -3,9 +3,9 @@
 # and run "github-actions-wac build" (or "ghawac build") to regenerate this file.
 # For more information, run "github-actions-wac --help".
 name: Pull Requests Command - Cypress
-'on': issue_comment
+"on": issue_comment
 env:
-  NODE_OPTIONS: '--max_old_space_size=4096'
+  NODE_OPTIONS: "--max_old_space_size=4096"
   AWS_REGION: eu-central-1
 jobs:
   checkComment:
@@ -21,9 +21,9 @@ jobs:
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           command: cypress
-          reaction: 'true'
+          reaction: "true"
           reaction-type: eyes
-          allow-edits: 'false'
+          allow-edits: "false"
           permission-level: write
       - name: Create comment
         uses: peter-evans/create-or-update-comment@v2
@@ -35,7 +35,7 @@ jobs:
             github.run_id }})). :sparkles:
     runs-on: ubuntu-latest
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
   validateWorkflows:
     name: Validate workflows
@@ -51,7 +51,7 @@ jobs:
     needs: checkComment
     runs-on: ubuntu-latest
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
   baseBranch:
     needs: checkComment
@@ -72,7 +72,7 @@ jobs:
           baseRefName -q .baseRefName)" >> $GITHUB_OUTPUT
     runs-on: ubuntu-latest
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
   constants:
     needs: baseBranch
@@ -97,7 +97,7 @@ jobs:
           vars.RANDOM_CACHE_KEY_SUFFIX }}" >> $GITHUB_OUTPUT
     runs-on: ubuntu-latest
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
   build:
     name: Build
@@ -136,7 +136,7 @@ jobs:
           path: ${{ needs.baseBranch.outputs.base-branch }}/.webiny/cached-packages
           key: ${{ needs.constants.outputs.run-cache-key }}
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
   e2e-wby-cms-ddb-constants:
     needs:
@@ -172,7 +172,7 @@ jobs:
           github.run_id }}_ddb" >> $GITHUB_OUTPUT
     runs-on: ubuntu-latest
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
   e2e-wby-cms-ddb-project-setup:
     needs:
@@ -184,7 +184,7 @@ jobs:
       cypress-config: ${{ steps.save-cypress-config.outputs.cypress-config }}
     environment: next
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
       CYPRESS_MAILOSAUR_API_KEY: ${{ secrets.CYPRESS_MAILOSAUR_API_KEY }}
       PULUMI_CONFIG_PASSPHRASE: ${{ secrets.PULUMI_CONFIG_PASSPHRASE }}
@@ -285,25 +285,25 @@ jobs:
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
       - name: Deployment Summary
-        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
           '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
-      - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
+      - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
+        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
       - name: Save Cypress config
         id: save-cypress-config
-        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: >-
           echo "cypress-config=$(cat cypress-tests/cypress.config.ts | tr -d
           '\t\n\r')" >> $GITHUB_OUTPUT
-      - name: Cypress - run installation wizard test
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
+      - name: Cypress - run installation wizard test
         run: >-
           yarn cy:run --browser chrome --spec
           "cypress/e2e/adminInstallation/**/*.cy.js"
+        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
     runs-on: ubuntu-latest
     permissions:
       id-token: write
@@ -328,7 +328,7 @@ jobs:
           }}
     environment: next
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
       CYPRESS_MAILOSAUR_API_KEY: ${{ secrets.CYPRESS_MAILOSAUR_API_KEY }}
       PULUMI_CONFIG_PASSPHRASE: ${{ secrets.PULUMI_CONFIG_PASSPHRASE }}
@@ -404,7 +404,7 @@ jobs:
           github.run_id }}_ddb-es" >> $GITHUB_OUTPUT
     runs-on: ubuntu-latest
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
   e2e-wby-cms-ddb-es-project-setup:
     needs:
@@ -416,7 +416,7 @@ jobs:
       cypress-config: ${{ steps.save-cypress-config.outputs.cypress-config }}
     environment: next
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
       CYPRESS_MAILOSAUR_API_KEY: ${{ secrets.CYPRESS_MAILOSAUR_API_KEY }}
       PULUMI_CONFIG_PASSPHRASE: ${{ secrets.PULUMI_CONFIG_PASSPHRASE }}
@@ -520,25 +520,25 @@ jobs:
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
       - name: Deployment Summary
-        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
           '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
-      - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
+      - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
+        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
       - name: Save Cypress config
         id: save-cypress-config
-        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: >-
           echo "cypress-config=$(cat cypress-tests/cypress.config.ts | tr -d
           '\t\n\r')" >> $GITHUB_OUTPUT
-      - name: Cypress - run installation wizard test
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
+      - name: Cypress - run installation wizard test
         run: >-
           yarn cy:run --browser chrome --spec
           "cypress/e2e/adminInstallation/**/*.cy.js"
+        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
     runs-on: ubuntu-latest
     permissions:
       id-token: write
@@ -564,7 +564,7 @@ jobs:
           }}
     environment: next
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
       CYPRESS_MAILOSAUR_API_KEY: ${{ secrets.CYPRESS_MAILOSAUR_API_KEY }}
       PULUMI_CONFIG_PASSPHRASE: ${{ secrets.PULUMI_CONFIG_PASSPHRASE }}
@@ -644,7 +644,7 @@ jobs:
           github.run_id }}_ddb-os" >> $GITHUB_OUTPUT
     runs-on: ubuntu-latest
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
   e2e-wby-cms-ddb-os-project-setup:
     needs:
@@ -656,7 +656,7 @@ jobs:
       cypress-config: ${{ steps.save-cypress-config.outputs.cypress-config }}
     environment: next
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
       CYPRESS_MAILOSAUR_API_KEY: ${{ secrets.CYPRESS_MAILOSAUR_API_KEY }}
       PULUMI_CONFIG_PASSPHRASE: ${{ secrets.PULUMI_CONFIG_PASSPHRASE }}
@@ -760,25 +760,25 @@ jobs:
         working-directory: new-webiny-project
         run: yarn webiny deploy apps/website --env dev
       - name: Deployment Summary
-        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: >-
           node
           .github/workflows/wac/utils/runNodeScripts/printDeploymentSummary.js
           '../new-webiny-project' >> $GITHUB_STEP_SUMMARY
-      - name: Create Cypress config
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
+      - name: Create Cypress config
         run: yarn setup-cypress --projectFolder ../new-webiny-project
+        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
       - name: Save Cypress config
         id: save-cypress-config
-        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
         run: >-
           echo "cypress-config=$(cat cypress-tests/cypress.config.ts | tr -d
           '\t\n\r')" >> $GITHUB_OUTPUT
-      - name: Cypress - run installation wizard test
         working-directory: ${{ needs.baseBranch.outputs.base-branch }}
+      - name: Cypress - run installation wizard test
         run: >-
           yarn cy:run --browser chrome --spec
           "cypress/e2e/adminInstallation/**/*.cy.js"
+        working-directory: ${{ needs.baseBranch.outputs.base-branch }}
     runs-on: ubuntu-latest
     permissions:
       id-token: write
@@ -804,7 +804,7 @@ jobs:
           }}
     environment: next
     env:
-      NODE_OPTIONS: '--max_old_space_size=4096'
+      NODE_OPTIONS: "--max_old_space_size=4096"
       YARN_ENABLE_IMMUTABLE_INSTALLS: false
       CYPRESS_MAILOSAUR_API_KEY: ${{ secrets.CYPRESS_MAILOSAUR_API_KEY }}
       PULUMI_CONFIG_PASSPHRASE: ${{ secrets.PULUMI_CONFIG_PASSPHRASE }}
diff --git a/.github/workflows/wac/pullRequestsCommandCypress.wac.ts b/.github/workflows/wac/pullRequestsCommandCypress.wac.ts
index b773d1657ef..7642b36bd6b 100644
--- a/.github/workflows/wac/pullRequestsCommandCypress.wac.ts
+++ b/.github/workflows/wac/pullRequestsCommandCypress.wac.ts
@@ -5,7 +5,8 @@ import {
     createYarnCacheSteps,
     createInstallBuildSteps,
     createGlobalBuildCacheSteps,
-    createRunBuildCacheSteps
+    createRunBuildCacheSteps,
+    withCommonParams
 } from "./steps";
 import {
     NODE_OPTIONS,
@@ -153,30 +154,33 @@ const createCypressJobs = (dbSetup: string) => {
                 }
             },
             ...createDeployWebinySteps({ workingDirectory: DIR_TEST_PROJECT }),
-            {
-                name: "Deployment Summary",
-                "working-directory": DIR_WEBINY_JS,
-                run: `${runNodeScript(
-                    "printDeploymentSummary",
-                    `../${DIR_TEST_PROJECT}`
-                )} >> $GITHUB_STEP_SUMMARY`
-            },
-            {
-                name: "Create Cypress config",
-                "working-directory": DIR_WEBINY_JS,
-                run: `yarn setup-cypress --projectFolder ../${DIR_TEST_PROJECT}`
-            },
-            {
-                name: "Save Cypress config",
-                id: "save-cypress-config",
-                "working-directory": DIR_WEBINY_JS,
-                run: "echo \"cypress-config=$(cat cypress-tests/cypress.config.ts | tr -d '\\t\\n\\r')\" >> $GITHUB_OUTPUT"
-            },
-            {
-                name: "Cypress - run installation wizard test",
-                "working-directory": DIR_WEBINY_JS,
-                run: 'yarn cy:run --browser chrome --spec "cypress/e2e/adminInstallation/**/*.cy.js"'
-            }
+            ...withCommonParams(
+                [
+                    {
+                        name: "Deployment Summary",
+                        run: `${runNodeScript(
+                            "printDeploymentSummary",
+                            `../${DIR_TEST_PROJECT}`
+                        )} >> $GITHUB_STEP_SUMMARY`
+                    },
+                    {
+                        name: "Create Cypress config",
+                        run: `yarn setup-cypress --projectFolder ../${DIR_TEST_PROJECT}`
+                    },
+                    {
+                        name: "Save Cypress config",
+                        id: "save-cypress-config",
+                        run: "echo \"cypress-config=$(cat cypress-tests/cypress.config.ts | tr -d '\\t\\n\\r')\" >> $GITHUB_OUTPUT"
+                    },
+                    {
+                        name: "Cypress - run installation wizard test",
+                        run: 'yarn cy:run --browser chrome --spec "cypress/e2e/adminInstallation/**/*.cy.js"'
+                    }
+                ],
+                {
+                    "working-directory": DIR_WEBINY_JS
+                }
+            )
         ]
     });
 
diff --git a/.github/workflows/wac/push.wac.ts b/.github/workflows/wac/push.wac.ts
index e659a9beea6..b90b33d6ce5 100644
--- a/.github/workflows/wac/push.wac.ts
+++ b/.github/workflows/wac/push.wac.ts
@@ -13,14 +13,10 @@ import {
     createInstallBuildSteps,
     createRunBuildCacheSteps,
     createSetupVerdaccioSteps,
-    createYarnCacheSteps
+    createYarnCacheSteps,
+    withCommonParams
 } from "./steps";
 
-const withCommonParams = (
-    steps: NonNullable<NormalJob["steps"]>,
-    commonParams: Record<string, any>
-) => steps.map(step => ({ ...step, ...commonParams }));
-
 const createPushWorkflow = (branchName: string) => {
     const ucFirstBranchName = branchName.charAt(0).toUpperCase() + branchName.slice(1);