Skip to content

Internal - Main - Continuous Integration #397

Internal - Main - Continuous Integration

Internal - Main - Continuous Integration #397

Workflow file for this run

name: Internal - Main - Continuous Integration
on:
push:
branches: [main]
tags: ["*"]
workflow_dispatch:
schedule:
- cron: "25 8 * * 1"
permissions: {}
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
ci:
uses: ./.github/workflows/__shared-ci.yml
# jscpd:ignore-start
permissions:
actions: read
contents: read
packages: write
pull-requests: write
id-token: write
issues: read
security-events: write
statuses: write
# jscpd:ignore-end
secrets: inherit
release:
needs: ci
if: github.event_name != 'schedule'
uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@91a69c7a9730d3ec2886a80681dbb67634c70970 # 0.23.1
permissions:
contents: read
with:
update-all: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')) || github.event_name == 'workflow_dispatch' }}
github-app-client-id: ${{ vars.CI_BOT_APP_CLIENT_ID }}
secrets:
github-app-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }}
sync-docs:
needs: release
if: github.event_name != 'schedule' && github.ref_name == github.event.repository.default_branch && needs.release.outputs.artifact-id
uses: hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml@f3c9291760d927e6214e8d5f0a376af2d537c369 # 0.4.0
permissions:
contents: read
with:
artifact-id: ${{ needs.release.outputs.artifact-id }}
github-app-client-id: ${{ vars.CI_BOT_APP_CLIENT_ID }}
secrets:
github-app-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }}