deploy-to-production.yml

name: Deploy to Production
on:
  push:
    branches: [prod]

jobs:
  deploy:
    runs-on: ubuntu-latest

    environment:
      name: production
      url: https://ads.brave.com

    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      - name: Use Node.js
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
          node-version: 18.12.0
          cache: npm
      - name: Install dependencies
        run: npm ci
      - name: Build
        env:
          REACT_APP_SERVER_ADDRESS: ${{ secrets.REACT_PRODUCTION_APP_SERVER_ADDRESS }}
          REACT_APP_GIT_SHA1: ${{ github.sha }}
        run: |
          export REACT_APP_BUILD_TIME=$(date -Iseconds)
          npm run build
      - run: npm run check:audit
      - run: npm test
      - name: Deploy static files
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_PRODUCTION_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_PRODUCTION_SECRET_ACCESS_KEY }}
          AWS_REGION: us-west-2
          CLOUDFRONT_DISTRIBUTION_ID: ${{ secrets.CLOUDFRONT_PRODUCTION_DISTRIBUTION_ID }}
        run: |
          aws s3 sync build/ s3://ads-ui-production/ --delete
          aws cloudfront create-invalidation --distribution-id $CLOUDFRONT_DISTRIBUTION_ID --paths "/*"