Skip to content

build(deps): bump hoverkraft-tech/ci-github-common from 0.4.3 to 0.22.0 #65

build(deps): bump hoverkraft-tech/ci-github-common from 0.4.3 to 0.22.0

build(deps): bump hoverkraft-tech/ci-github-common from 0.4.3 to 0.22.0 #65

Workflow file for this run

name: Pull request - Continuous Integration
on:
pull_request:
branches: [main]
# jscpd:ignore-start
permissions:
contents: read
issues: read
packages: write
pull-requests: read
statuses: write
# FIXME: This is a workaround for having workflow actions. See https://github.com/orgs/community/discussions/38659
id-token: write
# jscpd:ignore-end
jobs:
ci:
name: Continuous Integration
uses: ./.github/workflows/__shared-ci.yml
secrets:
oci-registry-password: ${{ secrets.GITHUB_TOKEN }}

Check failure on line 24 in .github/workflows/pull-request-ci.yml

View workflow run for this annotation

GitHub Actions / Pull request - Continuous Integration

Invalid workflow file

The workflow is not valid. hoverkraft-tech/docker-base-images/.github/workflows/__shared-ci.yml@e4691992f3eeec9ed94fbc8f26a84edc71791e49 (Line: 24, Col: 3): Error calling workflow 'hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@0.22.0'. The nested job 'codeql' is requesting 'security-events: write', but is only allowed 'security-events: none'.
update-pr:
if: ${{ needs.ci.outputs.built-images }}
name: Update Pull Request
runs-on: "ubuntu-latest"
needs: ci
permissions:
pull-requests: write
issues: write
steps:
- id: get-comment-built-images
uses: actions/github-script@v7.0.1
with:
script: |
const builtImagesOutput = `${{ needs.ci.outputs.built-images }}`;
try {
builtImages = JSON.parse(builtImagesOutput);
} catch (error) {
throw new Error(`"built-images" output is not a valid JSON: ${error}`);
}
if (typeof builtImages !== 'object') {
core.setFailed('Given "built-images" output is not an object.');
return;
}
const commentMessage = Object.values(builtImages).map(({name,images}) => {
const imagesToPull = images.map(image => `\`\`\`\ndocker pull ${image}\n\`\`\``).join("\n");
return `### ${name}\n${imagesToPull}`;
}).join("\n");
if(commentMessage.length){
core.setOutput(
'comment-body',
commentMessage + "\n\nOnce the Pull Request gets validated, these(s) image(s) will automatically be deleted."
);
} else {
core.setOutput('comment-body','No images have been built.');
}
- uses: hoverkraft-tech/ci-github-common/actions/create-or-update-comment@0.22.0
with:
title: "Images have been built :sparkles: !"
body: |
${{ steps.get-comment-built-images.outputs.comment-body }}
reactions: "rocket"