ci: fix mark-stable workflow for workflow_run events

- use workflow_run.repository.full_name for gh API queries
- expose GITHUB_TOKEN as GH_TOKEN for the GitHub CLI
- improve log messages and keep tag skipped when checks are missing or failing
This commit is contained in:
Kevin Veen-Birkenbach
2025-12-11 12:26:29 +01:00
parent ba296a79c9
commit 3218b2b39f

View File

@@ -14,7 +14,7 @@ on:
jobs: jobs:
mark-stable: mark-stable:
# only run if the triggering workflow succeeded AND it ran on main # Only run if the triggering workflow succeeded AND it ran on main
if: > if: >
github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.conclusion == 'success' &&
github.event.workflow_run.head_branch == 'main' github.event.workflow_run.head_branch == 'main'
@@ -24,7 +24,6 @@ jobs:
contents: write # required to push tags contents: write # required to push tags
actions: read # required to query workflow runs via API actions: read # required to query workflow runs via API
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v4 uses: actions/checkout@v4
@@ -39,12 +38,13 @@ jobs:
- name: Check all required workflow results for this commit - name: Check all required workflow results for this commit
env: env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SHA: ${{ github.event.workflow_run.head_sha }} SHA: ${{ github.event.workflow_run.head_sha }}
REPO: ${{ github.repository }} REPO: ${{ github.event.workflow_run.repository.full_name }}
run: | run: |
set -euo pipefail set -euo pipefail
echo "Checking workflow results for commit: $SHA" echo "Checking workflow results for commit: $SHA in repository: $REPO"
required_workflows=( required_workflows=(
"Test Units" "Test Units"
@@ -69,17 +69,17 @@ jobs:
' | head -n1) ' | head -n1)
if [[ -z "$conclusion" || "$conclusion" == "null" ]]; then if [[ -z "$conclusion" || "$conclusion" == "null" ]]; then
echo "Workflow '$wf' has no run for this commit yet. Exiting." echo "Workflow '$wf' has no run for this commit yet. Exiting without tagging."
exit 0 exit 0
fi fi
if [[ "$conclusion" != "success" ]]; then if [[ "$conclusion" != "success" ]]; then
echo "Workflow '$wf' did not succeed (conclusion='$conclusion'). Exiting." echo "Workflow '$wf' did not succeed (conclusion='$conclusion'). Exiting without tagging."
exit 0 exit 0
fi fi
done done
echo "All workflows succeeded for commit $SHA — marking as stable." echo "All required workflows succeeded for commit $SHA — marking as stable."
- name: Move 'stable' tag to this commit - name: Move 'stable' tag to this commit
env: env: