Demo Preview Cleanup #48

	name: Demo Preview Cleanup

	on:
	schedule:
	- cron: '0 12 * * *' # every day at noon

	permissions:
	id-token: write # This is required for requesting the OIDC JWT for authing with Azure
	contents: read # This is required for actions/checkout
	pull-requests: read # Required to list PRs

	# This allows one deploy workflow to interrupt another
	concurrency:
	group: 'preview-env-cleanup @ ${{ github.head_ref \|\| github.run_id }} for ${{ github.event.inputs.PR_NUMBER }}'
	cancel-in-progress: true

	jobs:
	cleanup:
	name: Cleanup
	runs-on: ubuntu-latest
	timeout-minutes: 5
	environment:
	name: preview

	steps:
	- uses: Azure/login@v2
	with:
	# excluding a client secret here will cause a login via OpenID Connect (OIDC),
	# which prevents us from having to rotate client credentials, etc
	client-id: "5ad1a188-b944-40eb-a2f8-cc683a6a65a0"
	tenant-id: "398a6654-997b-47e9-b12b-9515b896b4de"
	subscription-id: "550eb99d-d0c7-4651-a337-f53fa6520c4f"

	# Do this before repo checkout to prevent running bundle install
	- uses: ruby/setup-ruby@v1
	with:
	ruby-version: '3.3'

	- name: Check out repo
	uses: actions/checkout@v4

	# Delete web app (which will also delete the App Service plan)
	# This will succeed even if the app doesn't exist / has already been deleted
	- name: 'Delete App Service Apps for closed PRs'
	run: ruby ./.github/workflows/demo-preview-cleanup.rb
	env:
	GITHUB_TOKEN: ${{ github.token }}

Provide feedback