GitHub Actions
Local Postgres weekly proof and AWS restore + reap cleanup.
Copy example workflows from revenant-cli: examples/workflows/local-verify.yml for local Postgres, or aws-verify.yml for RDS restore drills.
- No Go or npm in the runner — use 277pawan/revenant-action@v1.0.3.
- AWS workflows need secrets: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, SANDBOX_USER, SANDBOX_PASSWORD.
- Always run revenant reap with if: always() after AWS verify so sandboxes never linger.