Automated: Add Semgrep github action #157

	name: Deploy

	on:
	push:
	branches:
	- main

	permissions:
	id-token: write
	contents: read

	jobs:
	deploy:
	runs-on: ubuntu-latest
	environment:
	name: production
	url: https://engineering.fishbrain.com

	steps:
	- uses: actions/checkout@v3

	- name: Configure AWS Credentials
	uses: aws-actions/configure-aws-credentials@v1
	with:
	aws-region: eu-west-1
	role-to-assume: ${{ secrets.AWS_ROLE_ARN }}

	- name: Install
	run: yarn

	- name: Build
	run: yarn build && yarn export

	- name: Deploy
	if: ${{ success() }}
	run: \|
	echo "Deploying production to ${{ secrets.S3_OUTPUT_URL }} from Github environment"
	echo "... uploading to ${{ secrets.S3_OUTPUT_URL }}"
	aws s3 sync out ${{ secrets.S3_OUTPUT_URL }} --delete
	echo "... done"

Provide feedback