Fix CI: cannot assume role

.github/workflows/aws-deploy.yaml

@@ -24,7 +24,6 @@ on:
       environment:
         required: true
         type: string
-        default: "dev"
       secrets-location:
         type: string
         default: "local"
@@ -38,8 +37,6 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
-        with:
-          ref: ${{ inputs.environment }}
       - name: Install AWS CLI
         run: sudo snap install aws-cli --classic
       - name: Install AWS CDK CLI

.github/workflows/deploy-prod.yaml

@@ -1,15 +1,14 @@
 name: deploy-prod
 
 on:
-  workflow_run:
-    workflows:
-      - check
-    types:
-      - completed
-    branches:
-      - prod
+  push:
+    branches: ['prod']
 
 jobs:
+  test:
+    uses: ./.github/workflows/test.yaml
+    with:
+      environment: prod
   aws-deploy:
     uses: "./.github/workflows/aws-deploy.yaml"
     with:

.github/workflows/deploy-stage.yaml

@@ -1,15 +1,14 @@
 name: deploy-stage
 
 on:
-  workflow_run:
-    workflows:
-      - check
-    types:
-      - completed
-    branches:
-      - stage
+  push:
+    branches: ['stage']
 
 jobs:
+  test:
+    uses: ./.github/workflows/test.yaml
+    with:
+      environment: stage
   aws-deploy:
     uses: "./.github/workflows/aws-deploy.yaml"
     with:

.github/workflows/pr-check.yml

@@ -0,0 +1,11 @@
+name: pr-check
+
+on:
+  pull_request:
+    branches: ['*']
+
+jobs:
+  test:
+    uses: ./.github/workflows/test.yaml
+    with:
+      environment: dev

.github/workflows/check.yml → .github/workflows/test.yaml

@@ -1,11 +1,11 @@
-name: check
+name: test
 
 on:
-  pull_request:
-    branches: ['*']
-  push:
-    branches: ['*']
-
+  workflow_call:
+    inputs:
+      environment:
+        required: true
+        type: string
 jobs:
   unit-tests:
     runs-on: ubuntu-latest
@@ -25,6 +25,9 @@ jobs:
         run: pip install -r requirements.txt -r requirements-dev.txt
       - name: Generate cloudformation
         uses: youyo/aws-cdk-github-actions@v2
+        env:
+          ENV: ${{ inputs.environment }}
+          secrets-location: "ssm"
         with:
           cdk_subcommand: 'synth'
           actions_comment: false