.github/workflows/autopush.yaml: Use autopushers team membership for … #26
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Autopush | |
| # yamllint disable-line rule:truthy | |
| on: | |
| push: | |
| branches: | |
| - autopush-* | |
| # Cancels this run if a new one referring to the same object and same workflow | |
| # is requested | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| # The version of caching we are using. This can be upgraded if we | |
| # significantly change CI to the point where old caches become irrelevant. | |
| CACHE_VERSION: 0 | |
| # Default Python version. Jazzy defaults to 3.12. | |
| DEFAULT_PYTHON: 3.12 | |
| # Location of the pre-commit cache. This is set by pre-commit, not us! | |
| PRE_COMMIT_CACHE: ~/.cache/pre-commit | |
| jobs: | |
| ensure_autopusher: | |
| name: Ensure user has autopush access | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check autopushers team membership | |
| uses: actions/github-script@v7 | |
| with: | |
| github-token: ${{ secrets.INVESTIGATOR_BOT_TOKEN }} | |
| script: | | |
| const team = 'autopushers'; | |
| const teamResponse = await github.rest.teams.listMembersInOrg({ | |
| org: context.repo.owner, | |
| team_slug: team, | |
| }); | |
| const members = teamResponse.data.map((member) => member.login); | |
| // Check if the user is a member of the team | |
| if (!members.includes(context.actor)) { | |
| core.setFailed(`User ${context.actor} is not a member of the ` + | |
| `${team} team. Found: ${members.join(', ')}`); | |
| } | |
| pre-commit: | |
| name: Run pre-commit | |
| runs-on: | |
| group: mala-lab-pre-commit | |
| needs: [ensure_autopusher] | |
| steps: | |
| - name: Check out code from GitHub | |
| uses: actions/[email protected] | |
| with: | |
| submodules: recursive | |
| - name: Set up Python ${{ env.DEFAULT_PYTHON }} | |
| uses: actions/[email protected] | |
| with: | |
| python-version: ${{ env.DEFAULT_PYTHON }} | |
| cache: "pip" | |
| - name: Install pre-commit hooks | |
| run: | | |
| python --version | |
| pip install "$(cat requirements.txt | grep pre-commit)" | |
| - name: Generate pre-commit cache key | |
| id: pre-commit_cache_key | |
| run: > | |
| echo "::set-output | |
| name=key::${{ env.CACHE_VERSION }}-${{ env.DEFAULT_PYTHON }}-${{ | |
| hashFiles('.pre-commit-config.yaml') }}" | |
| - name: Restore base pre-commit environment | |
| id: cache-pre-commmit | |
| uses: actions/[email protected] | |
| with: | |
| path: ${{ env.PRE_COMMIT_CACHE }} | |
| key: > | |
| ${{ runner.os | |
| }}-pre-commit-${{ steps.pre-commit_cache_key.outputs.key }} | |
| - name: Install pre-commit dependencies if no cache | |
| if: steps.cache-precommit.outputs.cache-hit != 'true' | |
| run: | | |
| pre-commit install-hooks | |
| - name: Run pre-commit | |
| run: | | |
| pre-commit run --all-files --show-diff-on-failure | |
| autopush: | |
| name: Autopush changes | |
| needs: [pre-commit] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Wait for tests to succeed | |
| uses: lewagon/[email protected] | |
| with: | |
| ref: ${{ github.ref }} | |
| check-name: 'Run tests and build docs' | |
| repo-token: ${{ secrets.INVESTIGATOR_BOT_TOKEN }} | |
| wait-interval: 10 | |
| - name: Check out code from GitHub | |
| uses: actions/[email protected] | |
| with: | |
| submodules: recursive | |
| token: ${{ secrets.INVESTIGATOR_BOT_TOKEN }} | |
| ref: ${{ github.event.ref }} | |
| fetch-depth: 0 | |
| - name: Create commit | |
| run: | | |
| git fetch | |
| git config --global user.name \ | |
| "$(git --no-pager log --format=format:'%an' -n 1)" | |
| git config --global user.email \ | |
| "$(git --no-pager log --format=format:'%ae' -n 1)" | |
| git rebase origin/main | |
| git checkout main | |
| git branch | |
| git merge --ff-only ${{ github.event.ref }} | |
| git push | |
| git push -d origin ${{ github.event.ref }} |