Merge pull request #597 from indirect/deployment-tracking

try adding github deployment tracking

.github/workflows/ci.yml

@@ -1,10 +1,13 @@
 name: CI
+
 on:
   push:
     branches: [ "**", "!dependabot/**" ]
   pull_request:
+
 env:
   RAILS_ENV: test
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -45,14 +48,3 @@ jobs:
         if: always()
         with:
           sarif_file: tmp/sarif
-  deploy:
-    runs-on: ubuntu-latest
-    needs: [test, lint]
-    if: github.ref == 'refs/heads/main'
-    steps:
-      - uses: actions/checkout@v4
-      - uses: superfly/flyctl-actions/setup-flyctl@master
-      - run: flyctl deploy --remote-only --build-arg "GIT_SHA=${{ github.sha }}"
-        env:
-          FLY_APP: feedyouremail
-          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}

.github/workflows/deploy.yml

@@ -0,0 +1,28 @@
+name: Deploy
+
+on:
+  workflow_run:
+    workflows: [CI]
+    types: [completed]
+
+permissions:
+  contents: read
+  deployments: write
+
+env:
+  FLY_APP: feedyouremail
+
+jobs:
+  deploy:
+    if: |
+      github.event.workflow_run.conclusion == 'success' &&
+      github.event.workflow_run.head_branch == github.event.repository.default_branch
+    concurrency: deploy
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dentarg/fly@v1
+        with:
+          build-args: "GIT_SHA=${{ github.sha }}"
+          fly-token: ${{ secrets.FLY_API_TOKEN }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}