initial attempt at git workflow

Author: nhsd-david-wass

.github/actions/build-proxies/action.yml

@@ -0,0 +1,59 @@
+name: "Build Proxies"
+description: "Build Proxies"
+inputs:
+  version:
+    description: "Version number"
+    required: true
+runs:
+  using: composite
+
+  steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+    - uses: actions/setup-node@v4
+      with:
+        node-version: 24
+
+    - name: Npm install
+      working-directory: .
+      run: npm ci
+      shell: bash
+
+    - name: Build oas
+      working-directory: .
+      shell: bash
+      run: |
+        make publish-oas
+
+    - name: Setup Proxy Name
+      shell: bash
+      run: |
+
+        if [ -z $PR_NUMBER ]
+        then
+          echo "INSTANCE=$PROXYGEN_API_NAME" >> $GITHUB_ENV
+        else
+          echo "INSTANCE=$PROXYGEN_API_NAME-$PR_NUMBER" >> $GITHUB_ENV
+        fi
+
+    - name: Install Proxygen client
+      shell: bash
+      run: |
+        # Install proxygen cli in isolated environment with pipx
+        pip install proxygen-cli
+
+        # Setup proxygen auth and settings
+        mkdir -p ${HOME}/.proxygen
+        echo -n $PROXYGEN_PRIVATE_KEY | base64 --decode > ${HOME}/.proxygen/key
+        envsubst < ./.github/proxygen-credentials-template.yaml > ${HOME}/.proxygen/credentials.yaml
+        envsubst < ./.github/proxygen-credentials-template.yaml | cat
+        envsubst < ./.github/proxygen-settings.yaml > ${HOME}/.proxygen/settings.yaml
+        envsubst < ./.github/proxygen-settings.yaml | cat
+
+    - name: Deploy to Internal Dev Sandbox
+      run: |
+        proxygen instance deploy internal-dev-sandbox $INSTANCE build/notify-supplier.json --no-confirm
+
+    - name: Deploy to Internal Dev
+      run: |
+        proxygen instance deploy internal-dev $INSTANCE build/notify-supplier.json --no-confirm

.github/proxygen-credentials-template.yaml

@@ -0,0 +1,4 @@
+client_id: $PROXYGEN_CLIENT_ID
+key_id: $PROXYGEN_KID
+private_key_path: key
+base_url: https://identity.prod.api.platform.nhs.uk/realms/api-producers

.github/proxygen-settings.yaml

@@ -0,0 +1,2 @@
+endpoint_url: https://proxygen.prod.api.platform.nhs.uk
+api: hello-world

.github/workflows/stage-3-build.yaml

@@ -81,6 +81,24 @@ jobs:
         with:
           version: "${{ inputs.version }}"
 
+  artefact-proxies:
+    name: "Build proxies"
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    env:
+      PROXYGEN_PRIVATE_KEY: ${{ secrets.PROXYGEN_NOTIFY_SUPPLIER_PRIVATE_KEY }}
+      PROXYGEN_KID: notify-supplier-key-1
+      PROXYGEN_CLIENT_ID: nhs-notify-supplier-client
+      PROXYGEN_API_NAME: nhs-notify-supplier
+      PR_NUMBER: ${{ github.event.pull_request.number }}
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v4
+      - name: "Build proxies"
+        uses: ./.github/actions/build-proxies
+        with:
+          version: "${{ inputs.version }}"
+
   # artefact-1:
   #   name: "Artefact 1"
   #   runs-on: ubuntu-latest