Pass Sentry auth token during FE build (#4259)

Author: marcoacierno

.github/workflows/deploy.yml

@@ -306,6 +306,10 @@ jobs:
 
           conference_code=$(aws ssm get-parameter --output text --query Parameter.Value --with-decryption --name /pythonit/${{ env.TF_WORKSPACE }}/pycon-frontend/conference-code)
           echo "CONFERENCE_CODE=$conference_code" >> "$GITHUB_OUTPUT"
+
+          sentry_auth_token=$(aws ssm get-parameter --output text --query Parameter.Value --with-decryption --name /pythonit/${{ env.TF_WORKSPACE }}/common/sentry-auth-token)
+          echo "::add-mask::$sentry_auth_token"
+          echo "SENTRY_AUTH_TOKEN=$sentry_auth_token" >> "$GITHUB_OUTPUT"
       - name: Build and push
         if: ${{ steps.image.outputs.image_exists == 0 }}
         uses: docker/build-push-action@v6
@@ -326,6 +330,8 @@ jobs:
             CMS_HOSTNAME=${{ steps.vars.outputs.cms_hostname }}
             CONFERENCE_CODE=${{ steps.vars.outputs.conference_code }}
             GIT_HASH=${{ steps.git.outputs.githash }}
+          secrets: |
+            "sentry_auth_token=${{ steps.vars.outputs.sentry_auth_token }}"
 
   deploy-fe:
     runs-on: ubuntu-24.04

frontend/Dockerfile

@@ -24,7 +24,9 @@ WORKDIR /app
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 
-RUN corepack enable pnpm && pnpm run build
+RUN corepack enable pnpm
+RUN --mount=type=secret,id=sentry_auth_token,env=SENTRY_AUTH_TOKEN \
+    pnpm run build
 
 FROM base AS runner
 WORKDIR /app

frontend/next.config.js

@@ -130,4 +130,6 @@ const nextConfig = {
 
 module.exports = withSentryConfig(nextConfig, {
   authToken: SENTRY_AUTH_TOKEN,
+  org: "python-italia",
+  project: "pycon-frontend",
 });