From 019eec1f03e4baf30df0e1f36262f99ec0e6d7b3 Mon Sep 17 00:00:00 2001
From: Charlie Egan <charlie_egan@apple.com>
Date: Mon, 18 May 2026 15:52:20 +0100
Subject: [PATCH] chore: Push edge binaries to bucket (#8668)

This will allow us to have a redirect URL for edge binaries from the
website as we had before.

The new secret has been created but will need to merge to get access to
it and test.

Signed-off-by: Charlie Egan <charlie_egan@apple.com>
---
 .github/workflows/post-merge.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/post-merge.yaml b/.github/workflows/post-merge.yaml
index 7639826fb8..e18e849f53 100644
--- a/.github/workflows/post-merge.yaml
+++ b/.github/workflows/post-merge.yaml
@@ -193,6 +193,16 @@ jobs:
           merge-multiple: true
           path: _release
 
+      - name: Push edge binaries to bucket
+        env:
+          S3_RELEASE_BINARY_URL: ${{ secrets.S3_RELEASE_BINARY_URL }} # zizmor: ignore[secrets-outside-env]
+        if: ${{ env.S3_RELEASE_BINARY_URL }}
+        run: |
+          for asset in _release/*/opa_*_*; do
+            curl -f -X PUT --data-binary @"$asset" \
+              "${S3_RELEASE_BINARY_URL}/binaries/edge/$(basename "$asset")"
+          done
+
       - name: Create or update dev prerelease
         env:
           GH_TOKEN: ${{ github.token }}