gbh-tech/Werf Deployment Action
Configures base runner with Taskfile, kubectl, werf, and runs Werf commands and Tasks.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 10, 2026
- License
- MIT
Pinned Snippet
uses: gbh-tech/werf-deployment-action@3f3a09bbfda73ac089fb52d285b9752d9ded1b90 # v0.1.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| werf_secret_key | Werf secret key value | — | "" |
| aws_region | AWS Region | yes | — |
| role_arn | IAM role ARN to assume via OIDC. When set, OIDC authentication is used and static key inputs are ignored. Requires the calling workflow to declare permissions: id-token: write. | — | "" |
| aws_access_key_id | AWS access key ID. Used only when role_arn is not set. | — | "" |
| aws_secret_access_key | AWS secret access key. Used only when role_arn is not set. | — | "" |
| aws_session_token | AWS session token for temporary STS credentials. Used only when role_arn is not set. | — | "" |
| environment | Target environment | yes | — |
| tasks | Tasks to run | — | — |
| commands | Werf commands to run | — | — |
| kubectl_version | kubectl version to install | — | v1.34.0 |
| task_version | Task version to install | — | 3.43.2 |
| werf_version | Werf version to install | — | v2.53.0 |
Outputs
no outputs