lockDeploys.yml

name: Lock staging deploys during QA

on:
  issues:
    types: [labeled]

jobs:
  lockStagingDeploys:
    if: ${{ github.event.label.name == '🔐 LockCashDeploys 🔐' && contains(github.event.issue.labels.*.name, 'StagingDeployCash') && github.actor != 'OSBotify' }}
    runs-on: macos-12
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: main
          token: ${{ secrets.OS_BOTIFY_TOKEN }}

      - name: Wait for staging deploys to finish
        uses: ./.github/actions/javascript/awaitStagingDeploys
        with:
          GITHUB_TOKEN: ${{ secrets.OS_BOTIFY_TOKEN }}

      - name: Comment in StagingDeployCash to give Applause the 🟢 to begin QA
        run: |
          gh issue comment \
            "$(gh issue list --label StagingDeployCash --json number --jq '.[0].number')" \
            --body ":rocket: All staging deploys are complete, @Expensify/applauseleads please begin QA on version https://github.com/Expensify/App/releases/tag/$(< package.json jq -r .version) :rocket:"
        env:
          GITHUB_TOKEN: ${{ secrets.OS_BOTIFY_TOKEN }}

      - name: Announce failed workflow
        if: ${{ failure() }}
        uses: ./.github/actions/composite/announceFailedWorkflowInSlack
        with:
          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}