policies.yaml

name: Policies
on:
  push:
    branches:
      - main
    paths:
      - "policies/**"

jobs:
  policies:
    name: Update Policies
    runs-on: ubuntu-latest

    env:
      GITHUB_NPM_TOKEN: ${{ secrets.GH_CUSTOM_TOKEN }}

    permissions:
      id-token: "write"
      deployments: "write"

    steps:
      - uses: actions/checkout@v4
      - name: Use Node.js
        uses: actions/setup-node@v3
        with:
          node-version: 18.x
          cache: "npm"

      - id: "auth"
        name: "Authenticate to Google Cloud"
        uses: "google-github-actions/auth@v1"
        with:
          token_format: "access_token"
          workload_identity_provider: "projects/914576303414/locations/global/workloadIdentityPools/github-actions-wi-pool/providers/github-actions-wi-provider"
          service_account: "github-actions-docs@zuplo-production.iam.gserviceaccount.com"
          access_token_lifetime: "300s"

      - run: npm install
      - run: npm run ci:policies

      - name: Upload the Worker
        uses: "google-github-actions/upload-cloud-storage@v1"
        with:
          path: policies.v3.json
          process_gcloudignore: false
          destination: cdn.zuplo.com/portal
          headers: |-
            content-type: text/plain

      - name: Trigger Portal Release
        run: |
          curl -X POST \
          https://api.vercel.com/v1/integrations/deploy/prj_skw4YDCLsPJhlK7SrbLUzyLTdRQr/8Rem6suBuT