cron.yaml

name: Cron / Verify

on:
  schedule:
  - cron: "0 */12 * * *"

jobs:
  verify-thumbprint:
    name: Verify the thumbprint
    permissions:
      contents: read
      id-token: write
    runs-on: ubuntu-latest
    steps:
    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@v4
      with:
        aws-region: ${{ secrets.AWS_REGION }}
        role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/github
    - run: aws sts get-caller-identity
    - if: ${{ failure() }}
      name: Send a notification to Slack
      uses: slackapi/slack-github-action@v2.0.0
      env:
        SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK
        SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
      with:
        payload: |
          {
            "text": "${{ github.event.repository.name }}: ${{ job.status }}\n${{ github.event.head_commit.url }}",
            "blocks": [
              {
                "type": "section",
                "text": {
                  "type": "mrkdwn",
                  "text": "${{ github.event.repository.name }}: ${{ job.status }}\n${{ github.event.head_commit.url }}"
                }
              }
            ]
          }