- add matrix summary policy check (#2270)

Author: MIchaelMainer

.github/policies/branch-protection.yml

@@ -25,7 +25,7 @@ configuration:
     requiredStatusChecks:
     - GitOps/AdvancedSecurity
     - license/cla
-    - build (16.x)
+    - check-build-matrix
 
     # TODO: all commits should be signed. We need to get everyone signing their commits.
     requiresCommitSignatures: false

.github/workflows/pr.yml

@@ -39,3 +39,17 @@ jobs:
         with:
           name: bundle
           path: packages/mgt/dist/bundle
+
+  # The check-build-matrix returns success if all matrix jobs in build are successful; otherwise, it returns a failure.
+  # Use this as a PR status check for GitHub Policy Service instead of individual matrix entry checks.
+  check-build-matrix:
+    runs-on: ubuntu-latest
+    needs: build
+    if: always()
+    steps:
+      - name: All build matrix options are successful 
+        if: ${{ !(contains(needs.*.result, 'failure')) }}
+        run: exit 0
+      - name: One or more build matrix options failed
+        if: ${{ contains(needs.*.result, 'failure') }}
+        run: exit 1