envoy/.github/workflows/mobile-asan.yml at main · envoyproxy/envoy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
name: Mobile/ASAN

permissions:
  contents: read

on:
  workflow_run:
    workflows:
    - Request
    types:
    - completed

concurrency:
  group: >-
    ${{ ((github.event.workflow_run.head_branch == 'main'
          || startsWith(github.event.workflow_run.head_branch, 'release/v'))
          && github.event.repository.full_name == github.repository)
        && github.run_id
        || github.event.workflow_run.head_branch }}-${{ github.event.repository.full_name }}-${{ github.workflow }}
  cancel-in-progress: true


jobs:
  load:
    secrets:
      app-key: ${{ secrets.ENVOY_CI_APP_KEY }}
      app-id: ${{ secrets.ENVOY_CI_APP_ID }}
    permissions:
      actions: read
      contents: read
      packages: read
      pull-requests: read
    if: |
      github.event.workflow_run.conclusion == 'success'
      && github.event.workflow_run.repository.full_name == github.repository
      && contains(fromJSON('["pull_request_target", "push", "schedule"]'), github.event.workflow_run.event)
    uses: ./.github/workflows/_load.yml
    with:
      check-name: mobile-asan

  asan:
    permissions:
      actions: read
      contents: read
      packages: read
    name: asan
    uses: ./.github/workflows/_mobile_container_ci.yml
    if: ${{ needs.load.outputs.request && fromJSON(needs.load.outputs.request).run.mobile-asan }}
    needs: load
    with:
      args: >-
        test
        --config=ci
        --config=mobile-rbe
        --config=mobile-asan
        //test/common/...
      bind-mount: false
      request: ${{ needs.load.outputs.request }}
      target: asan
      timeout-minutes: 180

  request:
    secrets:
      app-id: ${{ secrets.ENVOY_CI_APP_ID }}
      app-key: ${{ secrets.ENVOY_CI_APP_KEY }}
    permissions:
      actions: read
      contents: read
    if: |
      always()
      && github.event.workflow_run.conclusion == 'success'
      && github.event.workflow_run.repository.full_name == github.repository
      && contains(fromJSON('["pull_request_target", "push", "schedule"]'), github.event.workflow_run.event)
      && needs.load.outputs.request
      && fromJSON(needs.load.outputs.request).run.mobile-asan
    needs:
    - load
    - asan
    uses: ./.github/workflows/_finish.yml
    with:
      needs: ${{ toJSON(needs) }}