From a97d08af585a6fcb5555bd1bf701077af583212a Mon Sep 17 00:00:00 2001 From: Brad Anderson Date: Thu, 16 Apr 2026 22:48:21 -0400 Subject: [PATCH 1/2] fix(prod): use 'prod' environment name instead of 'production' The deploy-prod workflow used 'production' as the environment name, which didn't match the EnforceAuth environment_config. Align with the dev/stage convention by using 'prod' everywhere. --- .github/workflows/deploy-prod.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/deploy-prod.yml b/.github/workflows/deploy-prod.yml index ba28ca9..bdeb067 100644 --- a/.github/workflows/deploy-prod.yml +++ b/.github/workflows/deploy-prod.yml @@ -1,5 +1,5 @@ # Deploys prod policies to EnforceAuth when prod/ changes on main. -# Entity ID configured in EA_ENTITY_ID secret (production environment). +# Entity ID configured in EA_ENTITY_ID secret (prod environment). # # Safety controls: # - Dry-run validation before deploy @@ -16,7 +16,7 @@ on: - "prod/**" concurrency: - group: deploy-production + group: deploy-prod cancel-in-progress: false permissions: @@ -49,7 +49,7 @@ jobs: with: entity-id: ${{ secrets.EA_ENTITY_ID }} api-url: ${{ vars.EA_API_URL }} - environment: production + environment: prod dry-run: true - name: Print dry-run summary @@ -69,7 +69,7 @@ jobs: needs: dry-run if: github.ref == 'refs/heads/main' && needs.dry-run.result == 'success' runs-on: ubuntu-latest - environment: production + environment: prod permissions: id-token: write contents: read @@ -81,6 +81,6 @@ jobs: with: entity-id: ${{ secrets.EA_ENTITY_ID }} api-url: ${{ vars.EA_API_URL }} - environment: production + environment: prod wait-for-completion: true timeout-minutes: 10 From 5f71913ece5e646dd54294d237769174df20cece Mon Sep 17 00:00:00 2001 From: Brad Anderson Date: Thu, 16 Apr 2026 22:51:54 -0400 Subject: [PATCH 2/2] fix(prod): update stale comments referencing 'production' environment --- .github/workflows/deploy-prod.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/deploy-prod.yml b/.github/workflows/deploy-prod.yml index bdeb067..71b1178 100644 --- a/.github/workflows/deploy-prod.yml +++ b/.github/workflows/deploy-prod.yml @@ -4,8 +4,8 @@ # Safety controls: # - Dry-run validation before deploy # - GitHub environment protection rules (configure required reviewers -# on the "production" environment in repo settings) -# - Concurrency lock prevents parallel production deploys +# on the "prod" environment in repo settings) +# - Concurrency lock prevents parallel prod deploys name: "Deploy: prod" on: