Added saving approval file (#24)

Author: ToreMerkely

.github/actions/get-github-workflow-approver/action.yml

@@ -27,6 +27,9 @@ outputs:
   approver:
     description: "Name of approver"
     value: ${{ steps.get-approver.outputs.approver }}
+  approval-json-file:
+    description: "GitHub approval json file"
+    value: ${{ steps.get-approver.outputs.approval-json-file }}
 
 runs:
   using: "composite"
@@ -37,7 +40,7 @@ runs:
       run: |
         API_URL="https://api.github.com/orgs/${{ github.repository_owner }}/audit-log"
         MAX_PAGES=5
-        PER_PAGE=5
+        PER_PAGE=1
         APPROVER=""
 
         for PAGE in $(seq 1 $MAX_PAGES); do
@@ -67,3 +70,4 @@ runs:
         fi
 
         echo "approver=$APPROVER" >> $GITHUB_OUTPUT
+        echo "approval-json-file=audit.json" >> $GITHUB_OUTPUT

.github/workflows/build-deploy-backend.yml

@@ -139,46 +139,7 @@ jobs:
       - name: Debug
         run: |
           echo "### Approval Actor for stage: ${{ steps.get-approver.outputs.approver }}" >> $GITHUB_STEP_SUMMARY
-
-#      - name: Get approval actor from audit log
-#        env:
-#          GH_TOKEN: ${{ secrets.READ_AUDIT_LOG }}
-#          OWNER: kosli-dev
-#          REPO: github-release-example
-#        run: |
-#          API_URL="https://api.github.com/orgs/${OWNER}/audit-log"
-#          MAX_PAGES=5
-#          PER_PAGE=5
-#          APPROVER=""
-#
-#          for PAGE in $(seq 1 $MAX_PAGES); do
-#            echo "Checking page $PAGE..."
-#            curl -s -H "Authorization: Bearer ${GH_TOKEN}" \
-#              -H "Accept: application/vnd.github+json" \
-#              --get \
-#              --data-urlencode "phrase=repo:${OWNER}/${REPO}" \
-#              --data-urlencode "phrase=action:workflows.approve_workflow_job" \
-#              --data-urlencode "per_page=${PER_PAGE}" \
-#              --data-urlencode "page=${PAGE}" \
-#              "$API_URL" > audit.json
-#
-#            MATCH=$(jq -r --arg run_id ${{ github.run_id }} '
-#              .[] | select(.workflow_run_id == ($run_id | tonumber)) | .actor' audit.json)
-#
-#            if [[ -n "$MATCH" ]]; then
-#              echo "Found matching approval by: $MATCH"
-#              APPROVER="$MATCH"
-#              break
-#            fi
-#          done
-#
-#          if [[ -z "$APPROVER" ]]; then
-#            echo "No approval found for workflow_run_id: $WORKFLOW_RUN_ID"
-#            exit 1
-#          fi
-#
-#          echo "approver=$APPROVER" >> $GITHUB_OUTPUT
-#          echo "### Approval Actor for stage: $APPROVER" >> $GITHUB_STEP_SUMMARY
+          cat ${{ steps.get-approver.outputs.approver }} >>  $GITHUB_STEP_SUMMARY
 
   semver-tag:
     needs: [build,deploy-stage]
@@ -252,41 +213,12 @@ jobs:
     needs: deploy-production
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+
       - name: Get approval actor from audit log
-        env:
-          GH_TOKEN: ${{ secrets.READ_AUDIT_LOG }}
-          OWNER: kosli-dev
-          REPO: github-release-example
-        run: |
-          API_URL="https://api.github.com/orgs/${OWNER}/audit-log"
-          MAX_PAGES=5
-          PER_PAGE=5
-          APPROVER=""
-
-          for PAGE in $(seq 1 $MAX_PAGES); do
-            echo "Checking page $PAGE..."
-            curl -s -H "Authorization: Bearer ${GH_TOKEN}" \
-              -H "Accept: application/vnd.github+json" \
-              --get \
-              --data-urlencode "phrase=repo:${OWNER}/${REPO}" \
-              --data-urlencode "phrase=action:workflows.approve_workflow_job" \
-              --data-urlencode "per_page=${PER_PAGE}" \
-              --data-urlencode "page=${PAGE}" \
-              "$API_URL" > audit.json
-
-            MATCH=$(jq -r --arg run_id ${{ github.run_id }} '
-              .[] | select(.workflow_run_id == ($run_id | tonumber)) | .actor' audit.json)
-
-            if [[ -n "$MATCH" ]]; then
-              echo "Found matching approval by: $MATCH"
-              APPROVER="$MATCH"
-              break
-            fi
-          done
-
-          if [[ -z "$APPROVER" ]]; then
-            echo "No approval found for workflow_run_id: $WORKFLOW_RUN_ID"
-            exit 1
-          fi
+        id: get-approver
+        uses: ./.github/actions/get-github-workflow-approver
+        with:
+          gh-audit-log-reader-token: ${{ secrets.READ_AUDIT_LOG }}
+
 
-          echo "### Approval Actor for production: $APPROVER" >> $GITHUB_STEP_SUMMARY