|
1 | 1 | name: docs-internal Moda CI |
2 | 2 |
|
3 | | -# More info on CI actions setup can be found here: |
4 | | -# https://github.com/github/ops/blob/master/docs/playbooks/build-systems/moving-moda-apps-from-bp-to-actions.md |
| 3 | +# More info on CI actions setup: |
| 4 | +# https://docs.github.com/en/actions |
5 | 5 |
|
6 | 6 | on: |
7 | 7 | workflow_dispatch: |
|
12 | 12 | types: [checks_requested] |
13 | 13 |
|
14 | 14 | jobs: |
15 | | - ########################## |
16 | | - # Generate Vault keys |
17 | | - ########################## |
18 | | - set-vault-keys: |
| 15 | + build: |
19 | 16 | runs-on: ubuntu-latest |
20 | | - outputs: |
21 | | - modified_vault_keys: ${{ steps.modify_vault_keys.outputs.modified }} |
22 | 17 | steps: |
23 | | - - name: Set vault-keys output |
24 | | - id: modify_vault_keys |
25 | | - run: | |
26 | | - if [ -z "${{ vars.VAULT_KEYS }}" ]; then |
27 | | - # We want to add the DOCS_BOT_PAT_BASE to the list of keys |
28 | | - # so that builds fetch the secret from the docs-internal vault |
29 | | - # where --environment is "ci" |
30 | | - echo "modified=DOCS_BOT_PAT_BASE" >> $GITHUB_OUTPUT |
31 | | - else |
32 | | - echo "modified=${{ vars.VAULT_KEYS }},DOCS_BOT_PAT_BASE" >> $GITHUB_OUTPUT |
33 | | - fi |
| 18 | + - name: Checkout repository |
| 19 | + uses: actions/checkout@v4 |
34 | 20 |
|
35 | | - ############# |
36 | | - # Moda jobs |
37 | | - ############# |
38 | | - moda-config-bundle: |
39 | | - if: ${{ github.repository == 'github/docs-internal' }} |
40 | | - name: ${{ matrix.ci_job.job }} |
41 | | - needs: set-vault-keys |
42 | | - strategy: |
43 | | - fail-fast: false |
44 | | - matrix: |
45 | | - ci_job: [{ 'job': 'docs-internal-moda-config-bundle' }] |
46 | | - uses: github/internal-actions/.github/workflows/moda.yml@main |
47 | | - with: |
48 | | - ci-formatted-job-name: ${{ matrix.ci_job.job }} |
49 | | - vault-keys: ${{ needs.set-vault-keys.outputs.modified_vault_keys }} |
50 | | - secrets: |
51 | | - dx-bot-token: ${{ secrets.INTERNAL_ACTIONS_DX_BOT_ACCOUNT_TOKEN }} |
52 | | - datadog-api-key: ${{ secrets.DATADOG_API_KEY }} |
| 21 | + - name: Setup Node.js |
| 22 | + uses: actions/setup-node@v4 |
| 23 | + with: |
| 24 | + node-version: '20' |
53 | 25 |
|
54 | | - ############# |
55 | | - # Docker Image jobs |
56 | | - ############# |
57 | | - docker-image: |
58 | | - if: ${{ github.repository == 'github/docs-internal' }} |
59 | | - name: ${{ matrix.ci_job.job }} |
60 | | - needs: set-vault-keys |
61 | | - strategy: |
62 | | - fail-fast: false |
63 | | - matrix: |
64 | | - ci_job: [{ 'job': 'docs-internal-docker-image' }] |
65 | | - uses: github/internal-actions/.github/workflows/kube.yml@main |
66 | | - with: |
67 | | - ci-formatted-job-name: ${{ matrix.ci_job.job }} |
68 | | - vault-keys: ${{ needs.set-vault-keys.outputs.modified_vault_keys }} |
69 | | - # Passes 'DOCS_BOT_PAT_BASE' secret from Vault to docker as --secret id=DOCS_BOT_PAT_BASE,src=<PAT value> |
70 | | - attest: true |
71 | | - docker-build-env-secrets: 'DOCS_BOT_PAT_BASE' |
72 | | - secrets: |
73 | | - dx-bot-token: ${{ secrets.INTERNAL_ACTIONS_DX_BOT_ACCOUNT_TOKEN }} |
74 | | - datadog-api-key: ${{ secrets.DATADOG_API_KEY }} |
| 26 | + - name: Install dependencies |
| 27 | + run: npm ci |
75 | 28 |
|
76 | | - ############# |
77 | | - # Docker Security jobs |
78 | | - ############# |
79 | | - docker-security: |
80 | | - if: ${{ github.repository == 'github/docs-internal' }} |
81 | | - name: ${{ matrix.ci_job.job }} |
82 | | - needs: set-vault-keys |
83 | | - strategy: |
84 | | - fail-fast: false |
85 | | - matrix: |
86 | | - ci_job: [{ 'job': 'docs-internal-docker-security' }] |
87 | | - uses: github/internal-actions/.github/workflows/docker_security.yml@main |
88 | | - with: |
89 | | - ci-formatted-job-name: ${{ matrix.ci_job.job }} |
90 | | - vault-keys: ${{ needs.set-vault-keys.outputs.modified_vault_keys }} |
91 | | - # Passes 'DOCS_BOT_PAT_BASE' secret from Vault to docker as --secret id=DOCS_BOT_PAT_BASE,src=<PAT value> |
92 | | - docker-build-env-secrets: 'DOCS_BOT_PAT_BASE' |
93 | | - secrets: |
94 | | - dx-bot-token: ${{ secrets.INTERNAL_ACTIONS_DX_BOT_ACCOUNT_TOKEN }} |
95 | | - datadog-api-key: ${{ secrets.DATADOG_API_KEY }} |
| 29 | + - name: Build |
| 30 | + run: npm run build |
96 | 31 |
|
97 | | -permissions: |
98 | | - actions: read |
99 | | - checks: read |
100 | | - contents: read |
101 | | - statuses: read |
102 | | - id-token: write |
103 | | - attestations: write |
| 32 | + - name: Run tests |
| 33 | + run: npm test |
0 commit comments