Skip to content

Review Pipeline Validation #7

Review Pipeline Validation

Review Pipeline Validation #7

Workflow file for this run

# Copyright (c) 2024 Intel Corporation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
---
name: Review Pipeline Validation
on:
pull_request_review:
types: [submitted, edited]
permissions: read-all
jobs:
check-review:
runs-on: [ k8-runners ]
if: contains(github.event.review.body, '/test-group') && !contains(github.event.pull_request.labels.*.name, 'validating')
permissions:
contents: read
pull-requests: write
outputs:
group_dir: ${{ steps.comment-inputs.outputs.group_dir }}
env_overrides: ${{ steps.comment-inputs.outputs.env_overrides }}
runner_label: ${{ steps.comment-inputs.outputs.runner_label }}
no-build: ${{ steps.comment-inputs.outputs.no-build || false }}
steps:
- uses: step-security/harden-runner@v2
with:
egress-policy: audit
- uses: actions/checkout@v4
- name: Get Inputs
id: comment-inputs
run: bash .github/utils/val-args.sh "$BODY"
env:
BODY: ${{ github.event.review.body }}
- name: Remove PASS Label
if: contains(github.event.pull_request.labels.*.name, 'PASS')
uses: actions/github-script@v7
with:
result-encoding: string
script: |
github.rest.issues.removeLabel({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
name: ["PASS"]
})
- name: Remove FAIL Label
if: contains(github.event.pull_request.labels.*.name, 'FAIL')
uses: actions/github-script@v7
with:
result-encoding: string
script: |
github.rest.issues.removeLabel({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
name: ["FAIL"]
})
- name: Lock
uses: actions/github-script@v7
with:
script: |
github.rest.issues.addLabels({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
labels: ['validating']
})
container-pipeline-tester:
needs: [ check-review ]
if: needs.check-review.outputs.group_dir && needs.check-review.outputs.runner_label
uses: ./.github/workflows/container-pipeline-tester.yaml
with:
group_dir: ${{ needs.check-review.outputs.group_dir }}
env_overrides: ${{ needs.check-review.outputs.env_overrides || '' }}
runner_label: ${{ needs.check-review.outputs.runner_label }}
no-build: ${{ fromJSON(needs.check-review.outputs.no-build) }}
secrets: inherit
status-check:
needs: [ check-review, container-pipeline-tester ]
if: ${{ always() && needs.check-review.result != 'skipped' }}
permissions:
checks: write
pull-requests: write
runs-on: [ k8-runners ]
steps:
- uses: step-security/harden-runner@v2
with:
egress-policy: audit
- name: Unlock
if: ${{ needs.check-review.result != 'skipped' }}
uses: actions/github-script@v7
with:
result-encoding: string
script: |
github.rest.issues.removeLabel({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
name: ["validating"]
})
- name: Set Fail Label
if: ${{ needs.check-review.result != 'success' || needs.container-pipeline-tester.result != 'success' }}
uses: actions/github-script@v7
with:
script: |
github.rest.issues.addLabels({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
labels: ['FAIL']
})
- name: Set Pass Label
if: ${{ needs.check-review.result == 'success' && needs.container-pipeline-tester.result == 'success' }}
uses: actions/github-script@v7
with:
script: |
github.rest.issues.addLabels({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
labels: ['PASS']
})