A lot of what i do, is write jsii constructs for aws-cdk. Both for private consumption and for public publishing.. The way that we create projects is using projen ( https://github.com/projen/projen ). It really takes a lot of the pain out of properly setting up a cdk project. ( and others are using it for a lot of other things )..
It sets up build / linting / publishing process's as GitHub Actions.
I do have something I share with you. ( see github link below ). I have set this project up, with a GitHub repo, linked through code catalyst.. Here I have branched from main, and want to push my branch back to GitHub, But I get denied, because of permissions problems..
[mde-user@ip-10-4-115-98 org2cdk]$ git push --set-upstream origin test
Enumerating objects: 59, done.
Counting objects: 100% (59/59), done.
Delta compression using up to 2 threads
Compressing objects: 100% (46/46), done.
Writing objects: 100% (57/57), 120.54 KiB | 5.02 MiB/s, done.
Total 57 (delta 12), reused 39 (delta 5), pack-reused 0
remote: Resolving deltas: 100% (12/12), done.
To https://git.us-west-2.github.source.3p.codecatalyst.aws/v1/aws-cdk-lib/org2cdk/org2cdk
! [remote rejected] test -> test (refusing to allow a GitHub App to create or update workflow `.github/workflows/build.yml` without `workflows` permission)
error: failed to push some refs to 'https://git.us-west-2.github.source.3p.codecatalyst.aws/v1/aws-cdk-lib/org2cdk/org2cdk'
[mde-user@ip-10-4-115-98 org2cdk]$
Looking at the permissions that the code catalyst connector has, this is expected, as it does not have any workflows permissions. I can't find a way to give it the required permissions.