Skip to content

Commit 71323a8

Browse files
committed
ci(deploy): guard deploy steps with check-secrets output
1 parent 306253c commit 71323a8

File tree

1 file changed

+13
-3
lines changed

1 file changed

+13
-3
lines changed

.github/workflows/docker-deploy.yml

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,18 +53,28 @@ jobs:
5353
needs: build-and-push
5454
runs-on: ubuntu-latest
5555
steps:
56+
- name: Check required App Service secrets
57+
id: check-secrets
58+
run: |
59+
if [ -z "${{ secrets.EDITOR_APP_NAME }}" ] || [ -z "${{ secrets.RESOURCE_GROUP }}" ] || [ -z "${{ secrets.EDITOR_API_APP_NAME }}" ]; then
60+
echo "deploy_ready=false" >> $GITHUB_OUTPUT
61+
echo "One or more App Service secrets are missing; skipping deploy steps."
62+
else
63+
echo "deploy_ready=true" >> $GITHUB_OUTPUT
64+
fi
65+
5666
- name: Azure Login
57-
if: ${{ secrets.EDITOR_APP_NAME != '' && secrets.RESOURCE_GROUP != '' && secrets.EDITOR_API_APP_NAME != '' }}
67+
if: ${{ steps.check-secrets.outputs.deploy_ready == 'true' }}
5868
uses: azure/login@v1
5969
with:
6070
creds: ${{ secrets.AZURE_CREDENTIALS }}
6171

6272
- name: Deploy editor to App Service (container)
63-
if: ${{ secrets.EDITOR_APP_NAME != '' && secrets.RESOURCE_GROUP != '' && secrets.EDITOR_API_APP_NAME != '' }}
73+
if: ${{ steps.check-secrets.outputs.deploy_ready == 'true' }}
6474
run: |
6575
az webapp config container set --name ${{ secrets.EDITOR_APP_NAME }} --resource-group ${{ secrets.RESOURCE_GROUP }} --docker-custom-image-name ${{ needs.build-and-push.outputs.registry }}/app-scripting-editor:latest
6676
6777
- name: Deploy editor-api to App Service (container)
68-
if: ${{ secrets.EDITOR_APP_NAME != '' && secrets.RESOURCE_GROUP != '' && secrets.EDITOR_API_APP_NAME != '' }}
78+
if: ${{ steps.check-secrets.outputs.deploy_ready == 'true' }}
6979
run: |
7080
az webapp config container set --name ${{ secrets.EDITOR_API_APP_NAME }} --resource-group ${{ secrets.RESOURCE_GROUP }} --docker-custom-image-name ${{ needs.build-and-push.outputs.registry }}/app-scripting-editor-api:latest

0 commit comments

Comments
 (0)