[ci] Run CI on PR commit on simulation of merge (#13379)

Author: efaure

.github/workflows/ci-docker-build.yml

@@ -6,7 +6,11 @@ on:
       image_tag:
         description: "Image Tag"
         type: string
-        required: true
+        default: ${{ github.sha }}
+      checkout_ref:
+        description: "Reference of the branch or commit sha"
+        type: string
+        default: ${{ github.sha }}
     outputs:
       image-tag-version-cleaned:
         description: "Image tag after formatting"
@@ -24,6 +28,8 @@ jobs:
       version: ${{ steps.meta.outputs.version }}
     steps:
     - uses: actions/checkout@v6
+      with:
+        ref: ${{ inputs.checkout_ref }}
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3
@@ -61,6 +67,8 @@ jobs:
       version: ${{ steps.meta.outputs.version }}
     steps:
     - uses: actions/checkout@v6
+      with:
+        ref: ${{ inputs.checkout_ref }}
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3

.github/workflows/ci-license-check.yml

@@ -2,6 +2,11 @@ name: Verify licenses
 
 on:
   workflow_call:
+    inputs:
+      checkout_ref:
+        description: "Reference of the branch or commit sha"
+        type: string
+        default: ${{ github.sha }}
 
 jobs:
   license-check:
@@ -11,6 +16,8 @@ jobs:
 
     - name: OpenCTI checkout
       uses: actions/checkout@v6
+      with:
+        ref: ${{ inputs.checkout_ref }}
 
     - name: Runner information
       continue-on-error: true

.github/workflows/ci-main.yml

@@ -2,34 +2,43 @@ name: OpenCTI CI
 on:
   workflow_dispatch:
   push:
+  pull_request:
+    types: [opened, synchronize, reopened]
 
-# Test stability 6
 jobs:
   wf-build-image:
       name: Build image
       uses: ./.github/workflows/ci-docker-build.yml
       with:
-        image_tag: ${{ github.sha }}
+        checkout_ref: ${{ github.event_name == 'pull_request'  && format('refs/pull/{0}/merge', github.event.pull_request.number) || github.sha }}
       secrets: inherit
 
   wf-api-test:
       name: API test
       uses: ./.github/workflows/ci-test-api.yml
       needs: wf-build-image
+      with:
+        checkout_ref: ${{ github.event_name == 'pull_request'  && format('refs/pull/{0}/merge', github.event.pull_request.number) || github.sha }}
       secrets: inherit
 
   wf-frontend-test:
       name: Frontend test
       uses: ./.github/workflows/ci-test-frontend.yml
+      with:
+        checkout_ref: ${{ github.event_name == 'pull_request'  && format('refs/pull/{0}/merge', github.event.pull_request.number) || github.sha }}
       secrets: inherit
 
   wf-client-python-test:
       name: Client Python
       uses: ./.github/workflows/ci-test-client-python.yml
       needs: wf-build-image
+      with:
+        checkout_ref: ${{ github.event_name == 'pull_request'  && format('refs/pull/{0}/merge', github.event.pull_request.number) || github.sha }}
       secrets: inherit
 
   wf-license-check:
       name: License check
       uses: ./.github/workflows/ci-license-check.yml
+      with:
+        checkout_ref: ${{ github.event_name == 'pull_request'  && format('refs/pull/{0}/merge', github.event.pull_request.number) || github.sha }}
       secrets: inherit

.github/workflows/ci-test-api.yml

@@ -2,6 +2,11 @@ name: Run OpenCTI api tests
 
 on:
   workflow_call:
+    inputs:
+      checkout_ref:
+        description: "Reference of the branch or commit sha"
+        type: string
+        default: ${{ github.sha }}
 
 jobs:
   run-opencti-integration-test:
@@ -11,6 +16,8 @@ jobs:
     steps:
     - name: OpenCTI checkout
       uses: actions/checkout@v6
+      with:
+        ref: ${{ inputs.checkout_ref }}
 
     - name: Runner information
       continue-on-error: true
@@ -125,6 +132,8 @@ jobs:
     steps:
     - name: OpenCTI checkout
       uses: actions/checkout@v6
+      with:
+        ref: ${{ inputs.checkout_ref }}
 
     - name: Runner information
       continue-on-error: true
@@ -196,6 +205,8 @@ jobs:
     steps:
     - name: OpenCTI checkout
       uses: actions/checkout@v6
+      with:
+        ref: ${{ inputs.checkout_ref }}
 
     - name: Runner information
       continue-on-error: true

.github/workflows/ci-test-client-python.yml

@@ -2,6 +2,11 @@ name: Run Client Python - PyCti tests
 
 on:
   workflow_call:
+    inputs:
+      checkout_ref:
+        description: "Reference of the branch or commit sha"
+        type: string
+        default: ${{ github.sha }}
 
 jobs:
   client-python-test:
@@ -14,6 +19,8 @@ jobs:
     steps:
     - name: OpenCTI checkout
       uses: actions/checkout@v6
+      with:
+        ref: ${{ inputs.checkout_ref }}
 
     - name: Runner information
       continue-on-error: true

.github/workflows/ci-test-frontend.yml

@@ -2,6 +2,11 @@ name: Run OpenCTI frontend tests
 
 on:
   workflow_call:
+    inputs:
+      checkout_ref:
+        description: "Reference of the branch or commit sha"
+        type: string
+        default: ${{ github.sha }}
 
 jobs:
   opencti-frontend-test:
@@ -10,6 +15,8 @@ jobs:
     steps:
     - name: OpenCTI checkout
       uses: actions/checkout@v6
+      with:
+        ref: ${{ inputs.checkout_ref }}
 
     - name: Runner information
       continue-on-error: true
@@ -49,6 +56,7 @@ jobs:
       uses: actions/checkout@v6
       with:
         path: frontend-e2e-test
+        ref: ${{ inputs.checkout_ref }}
 
     - name: Runner information
       continue-on-error: true
@@ -195,6 +203,8 @@ jobs:
     steps:
     - name: OpenCTI checkout
       uses: actions/checkout@v6
+      with:
+        ref: ${{ inputs.checkout_ref }}
 
     - name: Runner information
       continue-on-error: true