3218b2b39f
- use workflow_run.repository.full_name for gh API queries - expose GITHUB_TOKEN as GH_TOKEN for the GitHub CLI - improve log messages and keep tag skipped when checks are missing or failing
102 lines
3.0 KiB
YAML
102 lines
3.0 KiB
YAML
name: Mark stable commit
|
|
|
|
on:
|
|
workflow_run:
|
|
workflows:
|
|
- Test Units
|
|
- Test Code Integration
|
|
- Test OS Containers
|
|
- Test End-To-End
|
|
- Test Virgin User
|
|
- Test Virgin Root
|
|
types:
|
|
- completed
|
|
|
|
jobs:
|
|
mark-stable:
|
|
# Only run if the triggering workflow succeeded AND it ran on main
|
|
if: >
|
|
github.event.workflow_run.conclusion == 'success' &&
|
|
github.event.workflow_run.head_branch == 'main'
|
|
runs-on: ubuntu-latest
|
|
|
|
permissions:
|
|
contents: write # required to push tags
|
|
actions: read # required to query workflow runs via API
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # required for accessing tags/history
|
|
|
|
- name: Install jq and gh (if needed)
|
|
run: |
|
|
sudo apt-get update -y
|
|
sudo apt-get install -y jq gh || true
|
|
|
|
- name: Check all required workflow results for this commit
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
SHA: ${{ github.event.workflow_run.head_sha }}
|
|
REPO: ${{ github.event.workflow_run.repository.full_name }}
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
echo "Checking workflow results for commit: $SHA in repository: $REPO"
|
|
|
|
required_workflows=(
|
|
"Test Units"
|
|
"Test Code Integration"
|
|
"Test OS Containers"
|
|
"Test End-To-End"
|
|
"Test Virgin User"
|
|
"Test Virgin Root"
|
|
)
|
|
|
|
# Fetch all workflow runs for this commit
|
|
json=$(gh api \
|
|
repos/"$REPO"/actions/runs \
|
|
-F head_sha="$SHA" \
|
|
-F per_page=100)
|
|
|
|
for wf in "${required_workflows[@]}"; do
|
|
conclusion=$(printf '%s\n' "$json" | jq -r --arg name "$wf" '
|
|
.workflow_runs[]
|
|
| select(.name == $name)
|
|
| .conclusion
|
|
' | head -n1)
|
|
|
|
if [[ -z "$conclusion" || "$conclusion" == "null" ]]; then
|
|
echo "Workflow '$wf' has no run for this commit yet. Exiting without tagging."
|
|
exit 0
|
|
fi
|
|
|
|
if [[ "$conclusion" != "success" ]]; then
|
|
echo "Workflow '$wf' did not succeed (conclusion='$conclusion'). Exiting without tagging."
|
|
exit 0
|
|
fi
|
|
done
|
|
|
|
echo "All required workflows succeeded for commit $SHA — marking as stable."
|
|
|
|
- name: Move 'stable' tag to this commit
|
|
env:
|
|
SHA: ${{ github.event.workflow_run.head_sha }}
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
git config user.name "github-actions[bot]"
|
|
git config user.email "github-actions[bot]@users.noreply.github.com"
|
|
|
|
echo "Updating 'stable' tag to point to $SHA"
|
|
|
|
if git rev-parse stable >/dev/null 2>&1; then
|
|
git tag -d stable || true
|
|
fi
|
|
git push origin :refs/tags/stable || true
|
|
|
|
git tag stable "$SHA"
|
|
git push origin stable
|