Email infrastructure for GitHub Actions workflows

name: Deploy and notify

on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Deploy application
        run: ./scripts/deploy.sh

      - name: Send deployment notice
        if: success()
        env:
          MM_API_KEY: ${{ secrets.MM_API_KEY }}
        run: |
          curl -s -X POST https://api.multimail.dev/v1/send_email \
            -H "Authorization: Bearer $MM_API_KEY" \
            -H "Content-Type: application/json" \
            -d '{
              "from": "[email protected]",
              "to": ["[email protected]"],
              "subject": "Deployed: ${{ github.repository }} @ ${{ github.sha }}",
              "text": "Deployment triggered by ${{ github.actor }} completed successfully.\n\nCommit: ${{ github.sha }}\nBranch: ${{ github.ref_name }}\nWorkflow: ${{ github.run_id }}"
            }'

name: CI with gated failure alerts

on: [push]

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Run tests
        id: tests
        run: bun test

      - name: Queue failure alert (gated)
        if: failure()
        env:
          MM_API_KEY: ${{ secrets.MM_API_KEY }}
        run: |
          RESPONSE=$(curl -s -X POST https://api.multimail.dev/v1/send_email \
            -H "Authorization: Bearer $MM_API_KEY" \
            -H "Content-Type: application/json" \
            -d '{
              "from": "[email protected]",
              "to": ["[email protected]"],
              "subject": "[NEEDS APPROVAL] CI failed: ${{ github.repository }}",
              "text": "Tests failed on ${{ github.ref_name }}.\nRun: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}\n\nThis message is pending human approval before delivery."
            }')
          echo "Queued message: $RESPONSE"

name: Release announcement

on:
  workflow_dispatch:
    inputs:
      version:
        description: Release version (e.g. v1.4.0)
        required: true
      release_notes:
        description: One-paragraph release summary
        required: true

jobs:
  announce:
    runs-on: ubuntu-latest
    steps:
      - name: Send release announcement
        env:
          MM_API_KEY: ${{ secrets.MM_API_KEY }}
          VERSION: ${{ inputs.version }}
          NOTES: ${{ inputs.release_notes }}
        run: |
          curl -s -X POST https://api.multimail.dev/v1/send_email \
            -H "Authorization: Bearer $MM_API_KEY" \
            -H "Content-Type: application/json" \
            -d "{
              \"from\": \"[email protected]\",
              \"to\": [\"[email protected]\"],
              \"subject\": \"Released: $VERSION\",
              \"text\": \"$NOTES\\n\\nFull changelog: https://github.com/${{ github.repository }}/releases/tag/$VERSION\"
            }"

      - name: Check pending approvals
        env:
          MM_API_KEY: ${{ secrets.MM_API_KEY }}
        run: |
          curl -s https://api.multimail.dev/v1/list_pending \
            -H "Authorization: Bearer $MM_API_KEY" | jq '.pending[] | {id, subject, status}'

"cm"># .github/scripts/send_scan_report.py
import os
import json
import sys
from multimail import Multimail

client = Multimail(api_key=os.environ["MM_API_KEY"])

"cm"># Scan results passed as JSON via environment variable
results = json.loads(os.environ.get("SCAN_RESULTS", "{}"))
critical = results.get("critical", [])
high = results.get("high", [])

if not critical and not high:
    print("No critical or high findings — skipping alert")
    sys.exit(0)

body_lines = ["Security scan completed for " + os.environ["GITHUB_REPOSITORY"]]
body_lines.append("Run: https://github.com/" + os.environ["GITHUB_REPOSITORY"] + "/actions/runs/" + os.environ["GITHUB_RUN_ID"])
body_lines.append("")

if critical:
    body_lines.append(f"CRITICAL ({len(critical)}):")
    for finding in critical:
        body_lines.append(f"  - {finding}")

if high:
    body_lines.append(f"HIGH ({len(high)}):")
    for finding in high:
        body_lines.append(f"  - {finding}")

response = client.send_email(
    from_address="[email protected]",
    to=["[email protected]"],
    subject=f"[Security] {len(critical)} critical findings in {os.environ[&"cm">#039;GITHUB_REPOSITORY']}",
    text="\n".join(body_lines)
)

print(f"Sent: {response.message_id}")