From 42a5436bee51b4f2bf274cb07deaad473ee1ae8b Mon Sep 17 00:00:00 2001
From: Feyisayo Afolabi <feyisayo.alabaafolabi1@nhs.net>
Date: Thu, 23 Apr 2026 09:31:14 +0100
Subject: [PATCH 1/2] Chore: [ELI-811] - Added run-nbs-int-tests job for NBS
 integration tests in preprod

---
 .github/workflows/nbs-int-tests.yml | 58 +++++++++++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 .github/workflows/nbs-int-tests.yml

diff --git a/.github/workflows/nbs-int-tests.yml b/.github/workflows/nbs-int-tests.yml
new file mode 100644
index 0000000..24da58e
--- /dev/null
+++ b/.github/workflows/nbs-int-tests.yml
@@ -0,0 +1,58 @@
+name: NBS Int Tests
+
+on:
+  workflow_dispatch:
+
+jobs:
+  run-nbs-int-tests:
+    permissions:
+      id-token: write
+      contents: read
+    runs-on: ubuntu-22.04
+    environment: preprod
+
+    steps:
+      - name: Checkout main
+        uses: actions/checkout@v4
+        with:
+          ref: main
+
+      - name: Install asdf
+        uses: asdf-vm/actions/setup@v3
+        with:
+          asdf_version: v0.18.0
+
+      - name: Cache asdf
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.asdf
+          key: ${{ runner.os }}-asdf-${{ hashFiles('**/.tool-versions') }}
+
+      - name: Install asdf dependencies
+        uses: asdf-vm/actions/install@v3
+        with:
+          asdf_version: v0.18.0
+        env:
+          PYTHON_CONFIGURE_OPTS: --enable-shared
+
+      - name: Cache Virtualenv
+        id: cache-venv
+        uses: actions/cache@v4
+        with:
+          path: |
+            .venv
+          key: ${{ runner.os }}-venv-${{ hashFiles('pyproject.toml') }}
+
+      - name: Install Dependencies
+        if: steps.cache-venv.outputs.cache-hit != 'true'
+        run: make install
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v5
+        with:
+          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/Eligibility-Signposting-API-E2E-Regression-Tests
+          aws-region: eu-west-2
+
+      - name: Run NBS Integration Tests
+        run: make run-nbs-preprod-tests

From b7e67eb15f0f8ef244664d05c0a01570bd95ab69 Mon Sep 17 00:00:00 2001
From: Feyisayo Afolabi <feyisayo.alabaafolabi1@nhs.net>
Date: Thu, 23 Apr 2026 11:40:10 +0100
Subject: [PATCH 2/2] Chore: [ELI-811] - Fixed the failing asdf installation
 step

---
 .github/workflows/nbs-int-tests.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/nbs-int-tests.yml b/.github/workflows/nbs-int-tests.yml
index 24da58e..028bea3 100644
--- a/.github/workflows/nbs-int-tests.yml
+++ b/.github/workflows/nbs-int-tests.yml
@@ -13,24 +13,24 @@ jobs:
 
     steps:
       - name: Checkout main
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           ref: main
 
       - name: Install asdf
-        uses: asdf-vm/actions/setup@v3
+        uses: asdf-vm/actions/setup@4f8f7939dd917fc656bb7c3575969a5988c28364
         with:
           asdf_version: v0.18.0
 
       - name: Cache asdf
-        uses: actions/cache@v4
+        uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2
         with:
           path: |
             ~/.asdf
           key: ${{ runner.os }}-asdf-${{ hashFiles('**/.tool-versions') }}
 
       - name: Install asdf dependencies
-        uses: asdf-vm/actions/install@v3
+        uses: asdf-vm/actions/install@4f8f7939dd917fc656bb7c3575969a5988c28364
         with:
           asdf_version: v0.18.0
         env:
@@ -38,7 +38,7 @@ jobs:
 
       - name: Cache Virtualenv
         id: cache-venv
-        uses: actions/cache@v4
+        uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2
         with:
           path: |
             .venv
@@ -49,7 +49,7 @@ jobs:
         run: make install
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@a7f0c828ac76e0d049e34c920172c60f579f9eb3
         with:
           role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/Eligibility-Signposting-API-E2E-Regression-Tests
           aws-region: eu-west-2