Skip to content

Commit 4a13ce3

Browse files
julien-carsique-sonarsourcejulien-carsique-sonarsource
committed
BUILD-8099 migration to GitHub Actions
1 parent 93ffba5 commit 4a13ce3

19 files changed

+307
-87
lines changed

‎.cirrus.star‎

Lines changed: 0 additions & 4 deletions
This file was deleted.

‎.cirrus.yml‎

Lines changed: 0 additions & 54 deletions
This file was deleted.

‎.cirrus/poetry.Dockerfile‎

Lines changed: 0 additions & 25 deletions
This file was deleted.

‎.github/actionlint.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# Configuration for https://github.com/rhysd/actionlint run by pre-commit
2+
self-hosted-runner:
3+
labels:
4+
- ubuntu-24.04-large

‎renovate.json‎ renamed to ‎.github/renovate.json‎

File renamed without changes.

‎.github/workflows/PullRequestClosed.yml‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
---
2+
name: Pull Request Closed
3+
4+
on:
5+
pull_request:
6+
types:
7+
- closed
8+
9+
jobs:
10+
PullRequestClosed_job:
11+
name: Pull Request Closed
12+
runs-on: ubuntu-24.04-large
13+
permissions:
14+
id-token: write
15+
pull-requests: read
16+
# For external PR, ticket should be moved manually
17+
if: |
18+
github.event.pull_request.head.repo.full_name == github.repository
19+
steps:
20+
- id: secrets
21+
uses: SonarSource/vault-action-wrapper@d6d745ffdbc82b040df839b903bc33b5592cd6b0 # 3.0.2
22+
with:
23+
secrets: |
24+
development/kv/data/jira user | JIRA_USER;
25+
development/kv/data/jira token | JIRA_TOKEN;
26+
- uses: sonarsource/gh-action-lt-backlog/PullRequestClosed@v2
27+
with:
28+
github-token: ${{ github.token }}
29+
jira-user: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_USER }}
30+
jira-token: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_TOKEN }}
31+
is-eng-xp-squad: true

‎.github/workflows/PullRequestCreated.yml‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
---
2+
name: Pull Request Created
3+
4+
on:
5+
pull_request:
6+
types:
7+
- opened
8+
9+
jobs:
10+
PullRequestCreated_job:
11+
name: Pull Request Created
12+
runs-on: ubuntu-24.04-large
13+
permissions:
14+
id-token: write
15+
# For external PR, ticket should be created manually
16+
if: |
17+
github.event.pull_request.head.repo.full_name == github.repository
18+
steps:
19+
- id: secrets
20+
uses: SonarSource/vault-action-wrapper@d6d745ffdbc82b040df839b903bc33b5592cd6b0 # 3.0.2
21+
with:
22+
secrets: |
23+
development/github/token/{REPO_OWNER_NAME_DASH}-jira token | GITHUB_TOKEN;
24+
development/kv/data/jira user | JIRA_USER;
25+
development/kv/data/jira token | JIRA_TOKEN;
26+
- uses: sonarsource/gh-action-lt-backlog/PullRequestCreated@v2
27+
with:
28+
github-token: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
29+
jira-user: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_USER }}
30+
jira-token: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_TOKEN }}
31+
is-eng-xp-squad: true

‎.github/workflows/RequestReview.yml‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
---
2+
name: Request review
3+
4+
on:
5+
pull_request:
6+
types:
7+
- review_requested
8+
9+
jobs:
10+
RequestReview_job:
11+
name: Request review
12+
runs-on: ubuntu-24.04-large
13+
permissions:
14+
id-token: write
15+
# For external PR, ticket should be moved manually
16+
if: |
17+
github.event.pull_request.head.repo.full_name == github.repository
18+
steps:
19+
- id: secrets
20+
uses: SonarSource/vault-action-wrapper@d6d745ffdbc82b040df839b903bc33b5592cd6b0 # 3.0.2
21+
with:
22+
secrets: |
23+
development/github/token/{REPO_OWNER_NAME_DASH}-jira token | GITHUB_TOKEN;
24+
development/kv/data/jira user | JIRA_USER;
25+
development/kv/data/jira token | JIRA_TOKEN;
26+
- uses: sonarsource/gh-action-lt-backlog/RequestReview@v2
27+
with:
28+
github-token: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
29+
jira-user: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_USER }}
30+
jira-token: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_TOKEN }}
31+
is-eng-xp-squad: true

‎.github/workflows/SubmitReview.yml‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
---
2+
name: Submit Review
3+
4+
on:
5+
pull_request_review:
6+
types:
7+
- submitted
8+
9+
jobs:
10+
SubmitReview_job:
11+
name: Submit Review
12+
runs-on: ubuntu-24.04-large
13+
permissions:
14+
id-token: write
15+
pull-requests: read
16+
# For external PR, ticket should be moved manually
17+
if: |
18+
github.event.pull_request.head.repo.full_name == github.repository
19+
&& (github.event.review.state == 'changes_requested'
20+
|| github.event.review.state == 'approved')
21+
steps:
22+
- id: secrets
23+
uses: SonarSource/vault-action-wrapper@d6d745ffdbc82b040df839b903bc33b5592cd6b0 # 3.0.2
24+
with:
25+
secrets: |
26+
development/github/token/{REPO_OWNER_NAME_DASH}-jira token | GITHUB_TOKEN;
27+
development/kv/data/jira user | JIRA_USER;
28+
development/kv/data/jira token | JIRA_TOKEN;
29+
- uses: sonarsource/gh-action-lt-backlog/SubmitReview@v2
30+
with:
31+
github-token: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
32+
jira-user: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_USER }}
33+
jira-token: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_TOKEN }}
34+
is-eng-xp-squad: true

‎.github/workflows/build.yml‎

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
name: Build
2+
on:
3+
push:
4+
branches:
5+
- master
6+
- branch-*
7+
pull_request:
8+
merge_group:
9+
workflow_dispatch:
10+
11+
#env:
12+
# DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
13+
14+
jobs:
15+
build:
16+
concurrency:
17+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
18+
cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
19+
runs-on: ubuntu-24.04-large
20+
name: Build
21+
permissions:
22+
id-token: write
23+
contents: write
24+
steps:
25+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
26+
- uses: SonarSource/ci-github-actions/get-build-number@master # dogfood
27+
- uses: SonarSource/ci-github-actions/build-poetry@master # dogfood
28+
29+
promote:
30+
if: false # TODO WIP BUILD-8099
31+
needs:
32+
- build
33+
concurrency:
34+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
35+
cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
36+
runs-on: ubuntu-24.04-large
37+
name: Promote
38+
permissions:
39+
id-token: write
40+
contents: write
41+
steps:
42+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
43+
- uses: jdx/mise-action@5cb1df66ed5e1fb3c670ea0b62fd17a76979826a # v2.3.1
44+
with:
45+
cache_save: false
46+
- name: Restore local Poetry cache
47+
uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
48+
with:
49+
path: ${{ github.workspace }}/.cache/pypoetry
50+
key: poetry-${{ runner.os }}-${{ hashFiles('poetry.lock') }}
51+
restore-keys: poetry-${{ runner.os }}-
52+
- uses: SonarSource/ci-github-actions/get-build-number@feat/jcarsique/BUILD-80099-promotePoetry # TODO WIP BUILD-8099
53+
- uses: SonarSource/ci-github-actions/promote-poetry@feat/jcarsique/BUILD-80099-promotePoetry # TODO WIP BUILD-8099

0 commit comments

Comments
 (0)