From da2e770cd20e96d4aa5858faa9f58b2812a6438d Mon Sep 17 00:00:00 2001
From: Kay-Zee <kan@axiomzen.co>
Date: Fri, 11 Oct 2024 15:13:44 -0700
Subject: [PATCH 1/2] Use Production Docker Registry environment for pushing to
 docker

---
 .github/workflows/builds.yml | 1 +
 .github/workflows/cd.yml     | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/builds.yml b/.github/workflows/builds.yml
index 92da5a94e84..cad6b7ad3c6 100644
--- a/.github/workflows/builds.yml
+++ b/.github/workflows/builds.yml
@@ -82,6 +82,7 @@ jobs:
   docker-push:
     name: ${{ matrix.role }} images
     runs-on: ubuntu-latest
+    environment: Production Docker Registry
     needs: matrix_builder
 
     # setup jobs for each role
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index b708d0b973c..919e6efa954 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -13,6 +13,7 @@ jobs:
   docker-push:
     name: Push to container registry
     runs-on: ubuntu-latest
+    environment: Production Docker Registry
     steps:
     - name: Setup Go
       uses: actions/setup-go@v4

From f93eb743b56140c9e3c5e656e629cfe363a48a72 Mon Sep 17 00:00:00 2001
From: Kay-Zee <kan@axiomzen.co>
Date: Tue, 15 Oct 2024 14:46:57 -0700
Subject: [PATCH 2/2] Swap to manual workflow dispatch for now

---
 .github/workflows/cd.yml | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 919e6efa954..3b5620f43c2 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -1,10 +1,18 @@
 name: CD
 
 on:
-  push:
-    tags:
-      - '*'
-      - "!daily-*"
+# Workflow dispatch for now, while we're testing environments
+  # push:
+  #   tags:
+  #     - '*'
+  #     - "!daily-*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Tag/commit'
+        required: true
+        type: string
+
 
 env:
   GO_VERSION: "1.22"
@@ -22,6 +30,8 @@ jobs:
         go-version: ${{ env.GO_VERSION }}
     - name: Checkout repo
       uses: actions/checkout@v2
+      with:
+        ref: ${{ inputs.tag }}
     # Provide Google Service Account credentials to Github Action, allowing interaction with the Google Container Registry
     # Logging in as github-actions@dl-flow.iam.gserviceaccount.com
     - id: auth