staging.yml

name: staging

on:
  push:
    branches:
      - main

jobs:
  deploy:
    permissions:
      contents: read
      packages: write
      attestations: write
      id-token: write
    runs-on: ubuntu-latest
    environment:
      name: staging
      url: https://staging.ridebeep.app
    steps:
      - name: Checkout 🛎️
        uses: actions/checkout@v4
      - uses: oven-sh/setup-bun@v1
        with:
          bun-version: latest
      - uses: pnpm/action-setup@v3
        name: Install pnpm
        id: pnpm-install
        with:
          version: latest
          run_install: false
      - uses: actions/setup-node@v4
        with:
          node-version: latest
          cache: 'pnpm'
      - name: 📦 install packages
        run: pnpm i --frozen-lockfile
      - name: Applying infrastructure 🚀
        uses: pulumi/actions@v4
        with:
          command: up
          stack-name: ${{ secrets.ENVIRONMENT_NAME }}
          work-dir: deploy
        env:
          secrets: ${{ toJSON(secrets) }}
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
          ACTOR: ${{ github.actor }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}