https://github.com/salineselin/cloudlab/blob/main/.github/workflows/pull_request.yml

name: Pulumi
on:
  pull_request:
    paths:
      - go.mod
      - go.sum
      - main.go
      - pulumi.prod.yaml
      - pulumi.yaml

jobs:
  preview:
    name: Preview
    runs-on: ubuntu-latest
    steps:
      - id: checkout
        uses: actions/checkout@v2

      - id: setup-golang
        uses: actions/setup-go@v2
        with:
          go-version: 1.16.x

      - id: download-modules
        run: go mod download

      - id: gcp-auth
        uses: google-github-actions/auth@v0.4.0
        with:
          credentials_json: "${{ secrets.GOOGLE_CREDENTIALS }}"

      - id: pulumi-run
        uses: pulumi/actions@v3
        with:
          command: preview
          stack-name: prod
        env:
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}

FYI this is using a not recommended way to authenticate as a serviceAccount to GCP in Github Actions. The Preferred method is to use Workload Identity Federation as described here: https://cloud.google.com/blog/products/identity-security/enabling-keyless-authentication-from-github-actions

@broad-parrot-2692 do you have a sample for AWS as well.

I'm glad I could be of some help