99 - master
1010 - release/**
1111 - potel-base
12- # XXX: We are using `pull_request_target` instead of `pull_request` because we want
13- # this to run on forks with access to the secrets necessary to run the test suite.
14- # Prefer to use `pull_request` when possible.
1512 pull_request :
1613# Cancel in progress workflows on pull_requests.
1714# https://docs.github.com/en/actions/using-jobs/using-concurrency#example-using-a-fallback-value
@@ -20,39 +17,11 @@ concurrency:
2017 cancel-in-progress : true
2118permissions :
2219 contents : read
23- # `write` is needed to remove the `Trigger: tests using secrets` label
24- pull-requests : write
2520env :
26- SENTRY_PYTHON_TEST_AWS_ACCESS_KEY_ID : ${{ secrets.SENTRY_PYTHON_TEST_AWS_ACCESS_KEY_ID }}
27- SENTRY_PYTHON_TEST_AWS_SECRET_ACCESS_KEY : ${{ secrets.SENTRY_PYTHON_TEST_AWS_SECRET_ACCESS_KEY }}
2821 BUILD_CACHE_KEY : ${{ github.sha }}
2922 CACHED_BUILD_PATHS : |
3023 ${{ github.workspace }}/dist-serverless
3124jobs :
32- check-permissions :
33- name : permissions check
34- runs-on : ubuntu-20.04
35- steps :
36- 37- with :
38- persist-credentials : false
39- - name : Check permissions on PR
40- if : github.event_name == 'pull_request_target'
41- run : |
42- python3 -uS .github/workflows/scripts/trigger_tests_on_label.py \
43- --repo-id ${{ github.event.repository.id }} \
44- --pr ${{ github.event.number }} \
45- --event ${{ github.event.action }} \
46- --username "$ARG_USERNAME" \
47- --label-names "$ARG_LABEL_NAMES"
48- env :
49- GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
50- # these can contain special characters
51- ARG_USERNAME : ${{ github.event.pull_request.user.login }}
52- ARG_LABEL_NAMES : ${{ toJSON(github.event.pull_request.labels.*.name) }}
53- - name : Check permissions on repo branch
54- if : github.event_name == 'push'
55- run : true
5625 test-aws-pinned :
5726 name : AWS (pinned)
5827 timeout-minutes : 30
6635 # ubuntu-20.04 is the last version that supported python3.6
6736 # see https://github.com/actions/setup-python/issues/544#issuecomment-1332535877
6837 os : [ubuntu-20.04]
69- needs : check-permissions
70- services :
71- docker :
72- image : docker:dind # Docker-in-Docker
73- options : --privileged
7438 steps :
753976- with :
77- ref : ${{ github.event.pull_request.head.sha || github.ref }}
7840 - uses : actions/setup-python@v5
7941 with :
8042 python-version : ${{ matrix.python-version }}
0 commit comments