mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
Elio BischofandGitHub
ee13d4be7d
# Which Problems Are Solved Action runs on PRs from forks can't authenticate at depot. # How the Problems Are Solved - The GitHub secret DEPOT_TOKEN is statically passed as env variable to the steps that use the depot CLI, as described [here](https://github.com/depot/setup-action#authentication). - Removed the oidc argument from the depot/setup-action, as we pass the env statically to the relevant steps. - The `id-token: write` permission is removed from all workflows, as it's not needed anymore. # Additional Changes Removed the obsolete comment ```yaml # latest if branch is main, otherwise image version which is the pull request number ``` # Additional Context Required by these approved PRs so their checks can be executed: - https://github.com/zitadel/zitadel/pull/9982 - https://github.com/zitadel/zitadel/pull/9958
61 lines
1.8 KiB
YAML
61 lines
1.8 KiB
YAML
name: Login Quality
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
ignore-run-cache:
|
|
description: 'Ignore run caches'
|
|
type: boolean
|
|
required: true
|
|
node_version:
|
|
required: true
|
|
type: string
|
|
secrets:
|
|
DEPOT_TOKEN:
|
|
required: true
|
|
|
|
jobs:
|
|
quality:
|
|
name: Ensure Quality
|
|
runs-on: depot-ubuntu-22.04-8
|
|
timeout-minutes: 30
|
|
permissions:
|
|
actions: write
|
|
env:
|
|
CACHE_DIR: /tmp/login-run-caches
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: depot/setup-action@v1
|
|
- name: Restore Run Caches
|
|
uses: actions/cache/restore@v4
|
|
id: run-caches-restore
|
|
with:
|
|
path: ${{ env.CACHE_DIR }}
|
|
key: ${{ runner.os }}-login-run-caches-${{github.ref_name}}-${{ github.sha }}-${{github.run_attempt}}
|
|
restore-keys: |
|
|
${{ runner.os }}-login-run-caches-${{github.ref_name}}-${{ github.sha }}-
|
|
${{ runner.os }}-login-run-caches-${{github.ref_name}}-
|
|
${{ runner.os }}-login-run-caches-
|
|
- uses: actions/download-artifact@v4
|
|
with:
|
|
path: .artifacts
|
|
name: zitadel-linux-amd64
|
|
- name: Unpack executable
|
|
run: |
|
|
tar -xvf .artifacts/zitadel-linux-amd64.tar.gz
|
|
mv zitadel-linux-amd64/zitadel ./zitadel
|
|
- run: make login_quality
|
|
env:
|
|
DEPOT_TOKEN: ${{ secrets.DEPOT_TOKEN }}
|
|
LOGIN_BAKE_CLI: depot bake
|
|
DEPOT_PROJECT_ID: w47wkxzdtw
|
|
IGNORE_RUN_CACHE: ${{ github.event.inputs.ignore-run-cache }}
|
|
NODE_VERSION: ${{ inputs.node_version }}
|
|
|
|
- name: Save Run Caches
|
|
uses: actions/cache/save@v4
|
|
with:
|
|
path: ${{ env.CACHE_DIR }}
|
|
key: ${{ steps.run-caches-restore.outputs.cache-primary-key }}
|
|
if: always()
|