feat(ci): add deploy pipeline with OIDC, dynamic stack naming, and deploy-intent artifact#98

Merged

krokoko merged 15 commits into

mainfrom

feat/deploy-yml

Jun 2, 2026

Commits on Jun 1, 2026

feat(ci): add deploy.yml workflow triggered by build completion

scottschreckengaust
and
claude
committed
feat(ci): dynamic stack naming and workflow_dispatch deploy trigger

scottschreckengaust
and
claude
committed
refactor(ci): move deploy input to build.yml, use deploy-intent artifact

scottschreckengaust
and
claude
committed
fix(ci): add input validation and allowlist enforcement for compute types

scottschreckengaust
and
claude
committed
fix(ci): add deploy-intent.json to .gitignore

scottschreckengaust
and
claude
committed
fix(security): skip deploy pipeline for fork PRs + document CI/CD flow

scottschreckengaust
and
claude
committed
fix(ci): use compact jq output in filter_valid_types to prevent multi-line matrix corruption

scottschreckengaust
and
claude
committed
fix(ci): handle sanitize() edge cases — trailing hyphen after cut and empty/leading-hyphen results

scottschreckengaust
and
claude
committed
fix(ci): remove dead deploy:* literal match — index() is exact, not glob

scottschreckengaust
and
claude
committed
chore(ci): derive ALL_TYPES from ALLOWED_COMPUTE_TYPES to reduce drift risk

scottschreckengaust
and
claude
committed
docs(ci): clarify exit vs return in validate_compute_type across workflows

scottschreckengaust
and
claude
committed
fix(ci): resolve PR number via head_sha fallback when event field is empty

scottschreckengaust
and
claude
committed
feat(ci): add cdk diff job before deploy approval gate (B2 compensating control)

scottschreckengaust
and
claude
committed
Merge branch 'main' into feat/deploy-yml
krokoko
authored
Merge branch 'main' into feat/deploy-yml
scottschreckengaust
authored