This repository has been archived by the owner on Apr 2, 2024. It is now read-only.

Bump actions/setup-python from 4 to 5 #141

	# Find full documentation here https://docs.github.com/en/actions/learn-github-actions/workflow-syntax-for-github-actions
	name: CI

	on:
	pull_request:

	# Manual invocation.
	workflow_dispatch:

	push:
	branches:
	- main
	jobs:
	CI:
	runs-on: ubuntu-latest

	# See https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token
	permissions:
	# required by aws-actions/configure-aws-credentials
	id-token: write
	contents: read
	pull-requests: write # required by guardian/actions-riff-raff
	steps:
	- uses: actions/checkout@v4

	# Setup AWS credentials to enable uploading to S3 for Riff-Raff.
	# See https://github.com/aws-actions/configure-aws-credentials
	- uses: aws-actions/configure-aws-credentials@v4
	with:
	role-to-assume: ${{ secrets.GU_RIFF_RAFF_ROLE_ARN }}
	aws-region: eu-west-1

	- name: Setup Node
	uses: actions/setup-node@v4
	with:
	node-version-file: '.nvmrc'
	cache: 'npm'
	cache-dependency-path: 'cdk/package-lock.json'

	- name: Setup Python 3.9
	uses: actions/setup-python@v5
	with:
	python-version: '3.9'

	- name: Run script/ci
	run: ./scripts/ci.sh

	- name: Upload to riff-raff
	uses: guardian/actions-riff-raff@v3
	with:
	app: snyk-tag-monitor
	githubToken: ${{ secrets.GITHUB_TOKEN }}
	commentingStage: INFRA
	projectName: security::snyk-tag-monitor
	configPath: cdk/cdk.out/riff-raff.yaml
	contentDirectories: \|
	cdk.out:
	- cdk/cdk.out
	snyk-tag-monitor:
	- snyk-tag-monitor.zip

Provide feedback