Restructure workflows (#597)

* protect files that workflows need to process secrets

* use `pull_request_target` instead of `pull_request` trigger

* upgraded to `actions/checkout@v3`

* get the PR's head ref

* restructure workflows

Author: dahagag

.github/workflows/ci-live.yml

@@ -0,0 +1,36 @@
+name: CI Live
+
+on:
+  pull_request_target:
+    types: [labeled]
+
+jobs:
+  test-live:
+    runs-on: ubuntu-18.04
+    if: contains(github.event.pull_request.labels.*.name, 'safe to test')
+
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+      - run: make github-env
+        env:
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+      - run: |
+          make \
+            -e BUILD_TARGET=runtime \
+            -e REGISTRATION_CREDENTIALS="$GITHUB_AUTH_TOKEN" \
+            -e LOKOLE_QUEUE_BROKER_SCHEME=azureservicebus \
+            -e LOKOLE_RESOURCE_SUFFIX="$SUFFIX" \
+            -e APPINSIGHTS_INSTRUMENTATIONKEY="$SUFFIX" \
+            -e AZURITE_ACCOUNT="$TEST_AZURE_STORAGE_ACCOUNT" \
+            -e AZURITE_KEY="$TEST_AZURE_STORAGE_KEY" \
+            -e AZURITE_HOST="" \
+            -e AZURITE_SECURE="True" \
+            -e TEST_STEP_DELAY=90 \
+            -e LIVE="True" \
+            build start integration-tests
+      - run: make status
+        if: ${{ failure() }}
+      - run: make clean-storage stop
+        if: ${{ always() }}

.github/workflows/ci.yml

@@ -8,38 +8,11 @@ on:
       - synchronize
 
 jobs:
-  test-live:
-    runs-on: ubuntu-18.04
-
-    steps:
-      - uses: actions/checkout@v2
-      - run: make github-env
-        env:
-          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
-      - run: |
-          make \
-            -e BUILD_TARGET=runtime \
-            -e REGISTRATION_CREDENTIALS="$GITHUB_AUTH_TOKEN" \
-            -e LOKOLE_QUEUE_BROKER_SCHEME=azureservicebus \
-            -e LOKOLE_RESOURCE_SUFFIX="$SUFFIX" \
-            -e APPINSIGHTS_INSTRUMENTATIONKEY="$SUFFIX" \
-            -e AZURITE_ACCOUNT="$TEST_AZURE_STORAGE_ACCOUNT" \
-            -e AZURITE_KEY="$TEST_AZURE_STORAGE_KEY" \
-            -e AZURITE_HOST="" \
-            -e AZURITE_SECURE="True" \
-            -e TEST_STEP_DELAY=90 \
-            -e LIVE="True" \
-            build start integration-tests
-      - run: make status
-        if: ${{ failure() }}
-      - run: make clean-storage stop
-        if: ${{ always() }}
-
   test-local:
     runs-on: ubuntu-18.04
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - run: |
           make \
             -e BUILD_TARGET=runtime \
@@ -55,7 +28,7 @@ jobs:
     runs-on: ubuntu-18.04
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - run: |
           make \
             -e BUILD_TARGET=runtime \