name: Deploy and diagnose (CloudFormation template path)

on:
  workflow_dispatch:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - uses: actions/checkout@v4

      - name: Deploy CloudFormation stack
        shell: bash
        run: |
          set -o pipefail
          # Replace with your actual package/deploy flow.
          aws cloudformation deploy \
            --template-file template.yaml \
            --stack-name your-stack-name \
            --capabilities CAPABILITY_IAM \
            --no-fail-on-empty-changeset 2>&1 | tee deployment.log

      - name: Diagnose deployment log
        if: always()
        id: sam-doctor
        uses: jakegold1647/sam-doctor@v0
        with:
          log-file: deployment.log
          summary: true