mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-08-25 08:00:59 +00:00
Kobi Hikri
91b5a10504
go_on_release.yml referenced this third-party action by the mutable @devel branch in the step that holds secrets.DENO_PAT (a write-scoped PAT used to push the generated go-client to another repo). Pinning to a full commit SHA (v1.7.3) removes the mutable-ref supply-chain exposure, consistent with the other SHA-pinned actions in the repo.
58 lines
1.6 KiB
YAML
58 lines
1.6 KiB
YAML
name: Publish go-client
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v*"
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
repo: windmill-go-client
|
|
|
|
jobs:
|
|
build_go_and_push_to_repo:
|
|
runs-on: ubicloud-standard-8
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v4
|
|
- name: install_jq
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install jq
|
|
- name: generate_go
|
|
run: |
|
|
go install github.com/deepmap/oapi-codegen/cmd/oapi-codegen@v1.11.0
|
|
cd go-client
|
|
rm .gitignore
|
|
./build.sh
|
|
go build
|
|
- name: Pushes to another repository
|
|
id: push_directory
|
|
uses: cpina/github-action-push-to-another-repository@55306faa4ed53b815ae49e564af8cfb359d32ae2 # v1.7.3
|
|
env:
|
|
API_TOKEN_GITHUB: ${{ secrets.DENO_PAT }}
|
|
with:
|
|
source-directory: go-client/
|
|
destination-github-username: ${{ github.repository_owner }}
|
|
destination-repository-name: ${{ env.repo }}
|
|
user-email: ruben@windmill.dev
|
|
commit-message: See ORIGIN_COMMIT from $GITHUB_REF
|
|
target-branch: main
|
|
|
|
tag_repo:
|
|
needs: [build_go_and_push_to_repo]
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
repository: ${{ github.repository_owner }}/${{ env.repo }}
|
|
token: ${{ secrets.DENO_PAT }}
|
|
path: ./client
|
|
|
|
- name: Push client
|
|
run: |
|
|
cd ./client
|
|
git config --global user.email "ruben@windmill.dev"
|
|
git config --global user.name "rubenfiszel[bot]"
|
|
git tag -a ${{ github.ref_name }} -m "${{ github.ref_name }}"
|
|
git push --tags
|