From 2c2c255ca13e6a55ad165780e4bb2ad9c0f4e764 Mon Sep 17 00:00:00 2001
From: "jake.ross" <jake.ross@nmt.edu>
Date: Tue, 6 Jan 2026 20:22:34 -0700
Subject: [PATCH] feat: reorder Google Cloud authentication step in staging
 workflow

---
 .github/workflows/CD_staging.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/CD_staging.yml b/.github/workflows/CD_staging.yml
index 519288372..94270a832 100644
--- a/.github/workflows/CD_staging.yml
+++ b/.github/workflows/CD_staging.yml
@@ -32,11 +32,6 @@ jobs:
               --no-dev \
               --output-file requirements.txt
 
-        - name: Authenticate to Google Cloud
-          uses: 'google-github-actions/auth@v2'
-          with:
-            credentials_json: ${{ secrets.CLOUD_DEPLOY_SERVICE_ACCOUNT_KEY }}
-
         - name: Run Alembic migrations on staging database
           env:
             DB_DRIVER: "cloudsql"
@@ -57,6 +52,11 @@ jobs:
           run: |
             uv run python transfers/backfill/staging.py
 
+        - name: Authenticate to Google Cloud
+          uses: 'google-github-actions/auth@v2'
+          with:
+            credentials_json: ${{ secrets.CLOUD_DEPLOY_SERVICE_ACCOUNT_KEY }}
+
         # Uses Google Cloud Secret Manager to store secret credentials
         - name: Create app.yaml
           run: |