clean-deploy.yml

# Reusable workflow to clean some deployment.
#
# Deletes one or more deployments and runs a follow-up "clean" action
# (for example a repository-dispatch) to perform any repository-specific cleanup required after deployment removal.
# The workflow can be triggered on-demand via a given comment trigger (e.g. `/undeploy`).
#
# Behavior / outputs:
#
# - Deletes matching deployment(s) via the local action at `./actions/deployment/delete`.
# - Exposes deleted environments in step output `environments`.
# - If environments were deleted the workflow will optionally trigger the configured clean action
#   (e.g. repository-dispatch) against the target repository and post a summary comment.

name: "Clean deploy"

on:
  workflow_call:
    inputs:
      runs-on:
        description: |
          JSON array of runner(s) to use.
          See https://docs.github.com/en/actions/using-jobs/choosing-the-runner-for-a-job.
        type: string
        default: '["ubuntu-latest"]'
        required: false
      github-app-id:
        description: |
          GitHub App ID to generate GitHub token in place of github-token.
          See https://github.com/actions/create-github-app-token.
        required: false
        type: string
      clean-deploy-type:
        description: |
          Type of clean-deploy action.
          Supported values:
            - [`repository-dispatch`](../../actions/clean-deploy/repository-dispatch/README.md).
        type: string
        required: false
        default: repository-dispatch
      clean-deploy-parameters:
        description: |
          Inputs to pass to the clean action.
          JSON object, depending on the clean-deploy-type.
          For example, for `repository-dispatch`:
          ```json
          {
            "repository": "my-org/my-repo"
          }
          ```
        type: string
      trigger-on-comment:
        description: |
          Comment trigger to start the workflow.
          See https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#issue_comment.
        type: string
        default: "/undeploy"
        required: false
    secrets:
      github-token:
        description: |
          GitHub token for deploying.
          Permissions:
            - contents: write
      github-app-key:
        description: |
          GitHub App private key to generate GitHub token in place of github-token.
          See https://github.com/actions/create-github-app-token.

permissions: {}

jobs:
  prepare-clean-deploy:
    name: Check if should clean deploy
    runs-on: ${{ fromJson(inputs.runs-on) }}
    permissions:
      issues: write
    outputs:
      trigger: ${{ steps.trigger.outputs.trigger }}
    steps:
      # jscpd:ignore-start
      - id: not-created-issue-comment
        if: github.event_name != 'issue_comment'
        run: echo "result=true" >> "$GITHUB_OUTPUT"

      - uses: shanegenschaw/pull-request-comment-trigger@de309e4a2e83bb08877cada483e3e2b13b8d8e4b # v3.0.0
        id: trigger-on-comment
        if: ${{ steps.not-created-issue-comment.outputs.result != 'true' && inputs.trigger-on-comment }}
        with:
          trigger: ${{ inputs.trigger-on-comment }}
          prefix_only: true
          reaction: eyes
        env:
          GITHUB_TOKEN: "${{ github.token }}"

      - id: trigger
        if: ${{ steps.not-created-issue-comment.outputs.result == 'true' || steps.trigger-on-comment.outputs.triggered == 'true' }}
        run: |
          if [ "${{ steps.not-created-issue-comment.outputs.result }}" = "true" ]; then
            echo "trigger=${{ github.event_name }}" >> "$GITHUB_OUTPUT"
            exit 0
          fi

          if [ "${{ steps.trigger-on-comment.outputs.triggered }}" = "true" ]; then
            echo "trigger=${{ github.event_name }}" >> "$GITHUB_OUTPUT"
            exit 0
          fi
      # jscpd:ignore-end

  clean-deploy:
    name: Clean deploy
    runs-on: ${{ fromJson(inputs.runs-on) }}
    needs: prepare-clean-deploy
    if: needs.prepare-clean-deploy.outputs.trigger
    permissions:
      actions: read
      deployments: write
      issues: write
      pull-requests: write
      id-token: write # Needed for getting local workflow actions
    steps:
      - id: local-workflow-actions
        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@4b53189212d5810f710bed89711002626977215b # 0.33.0
        with:
          actions-path: actions

      - id: prepare-cleaning
        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
        env:
          REPOSITORY: ${{ fromJSON(inputs.clean-deploy-parameters).repository }}
        with:
          script: |
            // Repository
            const repository = process.env.REPOSITORY.trim();

            if (repository) {
              core.setOutput("repository", repository);

              const [ownerName, repoName] = repository.split('/');
              core.setOutput("owner", ownerName);
            }

      - uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
        if: ${{ inputs.github-app-id }}
        id: generate-token
        with:
          app-id: ${{ inputs.github-app-id }}
          private-key: ${{ secrets.github-app-key }}
          owner: ${{ steps.prepare-cleaning.outputs.owner }}

      - id: delete-deployment
        uses: ./self-workflow/actions/deployment/delete
        with:
          token: ${{ steps.generate-token.outputs.token || secrets.github-token || github.token }}

      - uses: ./self-workflow/actions/clean-deploy/repository-dispatch
        if: ${{ steps.delete-deployment.outputs.environments && steps.delete-deployment.outputs.environments != '[]' && inputs.clean-deploy-type == 'repository-dispatch' }}
        with:
          repository: ${{ steps.prepare-cleaning.outputs.repository }}
          environment: ${{ fromJSON(steps.delete-deployment.outputs.environments)[0] }}
          github-token: ${{ steps.generate-token.outputs.token || secrets.github-token || github.token }}

      - uses: hoverkraft-tech/ci-github-common/actions/create-or-update-comment@4b53189212d5810f710bed89711002626977215b # 0.33.0
        if: ${{ steps.delete-deployment.outputs.environments && steps.delete-deployment.outputs.environments != '[]' }}
        with:
          title: "Deployment(s) have been deleted :wastebasket:."
          body: "The following deployment(s) have been deleted:\n\n- ${{ join(fromJSON(steps.delete-deployment.outputs.environments),'\n- ') }}"

      # jscpd:ignore-start
      - uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@4b53189212d5810f710bed89711002626977215b # 0.33.0
        if: always() && steps.local-workflow-actions.outputs.repository
        with:
          actions-path: actions
          repository: ${{ steps.local-workflow-actions.outputs.repository }}
          ref: ${{ steps.local-workflow-actions.outputs.ref }}
      # jscpd:ignore-end