deploy_data.yml

name: "[Deploy] data.trezor.io"

permissions:
  id-token: write
  contents: read

on:
  push:
    branches:
      - "master"
    # configures the workflow to run only when the path of the data directory changes
    paths:
      - "data/**"
      - "bootloader/**"
      - "bridge/**"
      - "firmware/**"
      - "legal/**"
      - "registry/**"
      - "udev/**"
      - "suite/**"
      - "connect/**"
      - "security/**"
      - "transparency/**"
      - "misc/**"
jobs:
  deploy_data:
    environment: production
    timeout-minutes: 10
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          lfs: "true"
      - name: Setup python
        uses: actions/setup-python@v5
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::538326561891:role/gh_actions_data_production_deploy
          aws-region: eu-central-1
      - name: Run release script
        run: ./scripts/deploy-data.sh