NRL-817 Do not store permissions in artifact

NHSDigital · Jul 1, 2024 · 99747ba · 99747ba
1 parent 58eca28
commit 99747ba
Show file tree

Hide file tree

Showing 2 changed files with 39 additions and 2 deletions.
diff --git a/.github/workflows/persistent-environment.yml b/.github/workflows/persistent-environment.yml
@@ -74,7 +74,15 @@ jobs:
         uses: actions/upload-artifact@v4
         with:
           name: build-artifacts
-          path: dist/*.zip
+          path: |
+            dist/*.zip
+            !dist/nrlf-permissions.zip
+
+      - name: Save NRLF Permissions cache
+        uses: actions/cache/save@v4
+        with:
+          key: ${{ github.run_id }}-nrlf-permissions
+          path: dist/nrlf-permissions.zip
 
   terraform-plan:
     name: Terraform Plan - ${{ inputs.environment }}
@@ -117,6 +125,13 @@ jobs:
           name: build-artifacts
           path: dist
 
+      - name: Restore NRLF permissions cache
+        uses: actions/cache/restore@v4
+        with:
+          key: ${{ github.run_id }}-nrlf-permissions
+          path: dist/nrlf-permissions.zip
+          fail-on-cache-miss: true
+
       - name: Terraform Init
         run: |
           terraform -chdir=terraform/infrastructure init
@@ -165,6 +180,13 @@ jobs:
           name: build-artifacts
           path: dist
 
+      - name: Restore NRLF permissions cache
+        uses: actions/cache/restore@v4
+        with:
+          key: ${{ github.run_id }}-nrlf-permissions
+          path: dist/nrlf-permissions.zip
+          fail-on-cache-miss: true
+
       - name: Configure Management Credentials
         uses: aws-actions/configure-aws-credentials@v4
         with:

diff --git a/.github/workflows/pr-env-deploy.yml b/.github/workflows/pr-env-deploy.yml
@@ -93,7 +93,15 @@ jobs:
         uses: actions/upload-artifact@v4
         with:
           name: build-artifacts
-          path: dist/*.zip
+          path: |
+            dist/*.zip
+            !dist/nrlf-permissions.zip
+
+      - name: Save NRLF Permissions cache
+        uses: actions/cache/save@v4
+        with:
+          key: ${{ github.run_id }}-nrlf-permissions
+          path: dist/nrlf-permissions.zip
 
       - name: Add Failure Pull Request Comment
         uses: actions/github-script@v7
@@ -143,6 +151,13 @@ jobs:
           name: build-artifacts
           path: dist
 
+      - name: Restore NRLF permissions cache
+        uses: actions/cache/restore@v4
+        with:
+          key: ${{ github.run_id }}-nrlf-permissions
+          path: dist/nrlf-permissions.zip
+          fail-on-cache-miss: true
+
       - name: Retrieve Server Certificates
         run: make truststore-pull-server ENV=dev