chore: migrate to shared security workflows (#80) #68

	name: Release

	on:
	push:
	branches: [master, release]

	jobs:
	request_approval:
	runs-on: ubuntu-latest
	steps:
	- name: Send Deploy Request
	uses: Basis-Theory/github-actions/deploy-slack-action@master
	with:
	slack-api-token: ${{ secrets.SLACK_DUCKBOT_API_KEY }}
	channel: ${{ vars.SLACK_DUCKBOT_PRODUCT_APPROVAL_CHANNEL }}
	mention-person: ${{ vars.SLACK_DUCKBOT_PRODUCT_APPROVER }}
	status: 'request'

	build-release:
	runs-on: ${{ matrix.os }}
	environment: PROD
	strategy:
	matrix:
	node: ['20.x']
	os: [ubuntu-latest]
	env:
	CI: 1
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
	steps:
	- name: Checkout repo
	uses: actions/checkout@v2
	with:
	token: ${{ secrets.GH_SEMANTIC_RELEASE_PAT }}

	- name: Start Deploy Message
	uses: Basis-Theory/github-actions/deploy-slack-action@master
	with:
	slack-api-token: ${{ secrets.SLACK_DUCKBOT_API_KEY }}
	channel: ${{ vars.SLACK_DUCKBOT_RELEASE_CHANNEL_ID }}

	- name: Use Node ${{ matrix.node }}
	uses: actions/setup-node@v1
	with:
	node-version: ${{ matrix.node }}

	- name: Install deps (with cache)
	uses: bahmutov/npm-install@v1
	with:
	install-command: yarn --immutable --no-progress --ignore-scripts

	- name: Build
	run: make build
	env:
	SKIP_INSTALL: 1 # install with cache was done already

	- name: Release
	run: make release
	env:
	GITHUB_TOKEN: ${{ secrets.GH_SEMANTIC_RELEASE_PAT }}

	- name: Stop Deploy Message
	if: always()
	uses: Basis-Theory/github-actions/deploy-slack-action@master
	with:
	slack-api-token: ${{ secrets.SLACK_DUCKBOT_API_KEY }}
	channel: ${{ vars.SLACK_DUCKBOT_RELEASE_CHANNEL_ID }}
	status: 'done'

Provide feedback