65 lines
2.0 KiB
YAML
65 lines
2.0 KiB
YAML
name: Labelled Ready to Sync Public
|
|
|
|
on:
|
|
pull_request:
|
|
types: [labeled]
|
|
|
|
env:
|
|
ROT13_STAGING_OWNER: ${{ secrets.ROT13_STAGING_OWNER }}
|
|
ROT13_UPSTREAM_OWNER: ${{ secrets.ROT13_UPSTREAM_OWNER }}
|
|
ROT13_UPSTREAM_BRANCH: ${{ secrets.ROT13_UPSTREAM_BRANCH }}
|
|
|
|
jobs:
|
|
Push-To-Staging:
|
|
name: Push to staging
|
|
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
|
|
|
|
permissions:
|
|
# Read-only access so we don't accidentally try to push to *this* repository.
|
|
contents: read
|
|
# Pull request write access, so we can remove the label.
|
|
issues: write
|
|
pull-requests: write
|
|
# Deployment write access, so we can add the nice deployment info.
|
|
deployments: write
|
|
|
|
# Only run on the private repository.
|
|
if: github.event.repository.private && github.event.label.name == 'Ready To Sync Public'
|
|
steps:
|
|
- name: Detect configuration
|
|
uses: The-OpenROAD-Project/actions/auto_config@main
|
|
|
|
- name: Removing label '${{ github.event.label.name }}'
|
|
uses: The-OpenROAD-Project/actions/remove_label@main
|
|
continue-on-error: true
|
|
|
|
- name: Clone repository
|
|
uses: The-OpenROAD-Project/actions/clone_from@main
|
|
with:
|
|
branch: ${{ env.PRIVATE_BRANCH }}
|
|
checkout: true
|
|
|
|
- name: Run security scan
|
|
uses: The-OpenROAD-Project/actions/security_scan_on_push@main
|
|
|
|
- name: Push to staging repository.
|
|
uses: The-OpenROAD-Project/actions/push_to@main
|
|
with:
|
|
owner: ${{ env.STAGING_OWNER }}
|
|
repo: ${{ env.STAGING_REPO }}
|
|
branch: ${{ env.STAGING_BRANCH }}
|
|
deployToken: ${{ secrets.STAGING_GITHUB_TOKEN }}
|
|
force: true
|
|
|
|
- id: send_pr
|
|
name: Create PR if needed.
|
|
uses: The-OpenROAD-Project/actions/send_pr@main
|
|
env:
|
|
STAGING_GITHUB_TOKEN: ${{ secrets.STAGING_GITHUB_TOKEN }}
|
|
|
|
- name: Linking to PR using deployment.
|
|
uses: The-OpenROAD-Project/actions/link_pr@main
|
|
env:
|
|
GITHUB_TOKEN: ${{ github.token }}
|
|
UPSTREAM_PR: ${{ steps.send_pr.outputs.pr }}
|