diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..5ace460 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,6 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" diff --git a/.github/workflows/ci-cd-build-packages-1.yml b/.github/workflows/ci-cd-build-packages-1.yml index be75a6c..cd676d3 100644 --- a/.github/workflows/ci-cd-build-packages-1.yml +++ b/.github/workflows/ci-cd-build-packages-1.yml @@ -15,12 +15,18 @@ name: 'CI/CD: build packages [1]' on: workflow_call: inputs: + git_commit: + type: string + required: false + allow_unsafe_pr_checkout: + type: boolean + required: false ci_artifacts_run_number: - required: true type: string - necessary_jobs: required: true + necessary_jobs: type: string + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number }} @@ -40,6 +46,9 @@ jobs: packages: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -99,6 +108,9 @@ jobs: packages: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -171,6 +183,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -270,6 +285,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [centos-8];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -369,6 +387,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -468,6 +489,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [centos-8];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -567,6 +591,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -666,6 +693,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [centos-8];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -765,6 +795,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -864,6 +897,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [centos-8];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -963,6 +999,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1056,6 +1095,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1155,6 +1197,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [centos-8];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1254,6 +1299,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1353,6 +1401,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [centos-8];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1452,6 +1503,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1551,6 +1605,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [centos-8];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1650,6 +1707,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1749,6 +1809,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [centos-8];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1848,6 +1911,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1942,6 +2008,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2041,6 +2110,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [el-9];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2140,6 +2212,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2239,6 +2314,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [el-9];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2338,6 +2416,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2437,6 +2518,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [el-9];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2536,6 +2620,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2635,6 +2722,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [el-9];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2734,6 +2824,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2827,6 +2920,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2926,6 +3022,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [el-9];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3025,6 +3124,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3124,6 +3226,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [el-9];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3223,6 +3328,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3322,6 +3430,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [el-9];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3421,6 +3532,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3520,6 +3634,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [el-9];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3619,6 +3736,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3766,6 +3886,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} diff --git a/.github/workflows/ci-cd-build-packages-2.yml b/.github/workflows/ci-cd-build-packages-2.yml index be0b198..6f0fc86 100644 --- a/.github/workflows/ci-cd-build-packages-2.yml +++ b/.github/workflows/ci-cd-build-packages-2.yml @@ -15,12 +15,18 @@ name: 'CI/CD: build packages [2]' on: workflow_call: inputs: + git_commit: + type: string + required: false + allow_unsafe_pr_checkout: + type: boolean + required: false ci_artifacts_run_number: - required: true type: string - necessary_jobs: required: true + necessary_jobs: type: string + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number }} @@ -40,6 +46,9 @@ jobs: packages: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -99,6 +108,9 @@ jobs: packages: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -171,6 +183,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -270,6 +285,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-11];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -369,6 +387,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -468,6 +489,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-11];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -567,6 +591,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -666,6 +693,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-11];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -765,6 +795,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -864,6 +897,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-11];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -963,6 +999,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1056,6 +1095,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1155,6 +1197,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-11];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1254,6 +1299,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1353,6 +1401,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-11];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1452,6 +1503,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1551,6 +1605,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-11];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1650,6 +1707,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1749,6 +1809,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-11];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1848,6 +1911,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1942,6 +2008,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2041,6 +2110,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-22.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2140,6 +2212,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2239,6 +2314,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-22.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2338,6 +2416,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2437,6 +2518,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-22.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2536,6 +2620,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2635,6 +2722,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-22.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2734,6 +2824,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2827,6 +2920,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2926,6 +3022,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-22.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3025,6 +3124,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3124,6 +3226,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-22.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3223,6 +3328,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3322,6 +3430,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-22.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3421,6 +3532,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3520,6 +3634,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-22.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3619,6 +3736,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3766,6 +3886,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} diff --git a/.github/workflows/ci-cd-build-packages-3.yml b/.github/workflows/ci-cd-build-packages-3.yml index 65b6225..507e242 100644 --- a/.github/workflows/ci-cd-build-packages-3.yml +++ b/.github/workflows/ci-cd-build-packages-3.yml @@ -15,12 +15,18 @@ name: 'CI/CD: build packages [3]' on: workflow_call: inputs: + git_commit: + type: string + required: false + allow_unsafe_pr_checkout: + type: boolean + required: false ci_artifacts_run_number: - required: true type: string - necessary_jobs: required: true + necessary_jobs: type: string + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number }} @@ -40,6 +46,9 @@ jobs: packages: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -99,6 +108,9 @@ jobs: packages: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -171,6 +183,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -270,6 +285,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-12];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -369,6 +387,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -468,6 +489,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-12];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -567,6 +591,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -666,6 +693,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-12];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -765,6 +795,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -864,6 +897,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-12];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -963,6 +999,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1056,6 +1095,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1155,6 +1197,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-12];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1254,6 +1299,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1353,6 +1401,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-12];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1452,6 +1503,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1551,6 +1605,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-12];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1650,6 +1707,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1749,6 +1809,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-12];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1848,6 +1911,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1942,6 +2008,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2041,6 +2110,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-24.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2140,6 +2212,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2239,6 +2314,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-24.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2338,6 +2416,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2437,6 +2518,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-24.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2536,6 +2620,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2635,6 +2722,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-24.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2734,6 +2824,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2827,6 +2920,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2926,6 +3022,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-24.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3025,6 +3124,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3124,6 +3226,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-24.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3223,6 +3328,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3322,6 +3430,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-24.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3421,6 +3532,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3520,6 +3634,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [ubuntu-24.04];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3619,6 +3736,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3766,6 +3886,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} diff --git a/.github/workflows/ci-cd-build-packages-4.yml b/.github/workflows/ci-cd-build-packages-4.yml index 5e7d10a..e7b8d46 100644 --- a/.github/workflows/ci-cd-build-packages-4.yml +++ b/.github/workflows/ci-cd-build-packages-4.yml @@ -15,12 +15,18 @@ name: 'CI/CD: build packages [4]' on: workflow_call: inputs: + git_commit: + type: string + required: false + allow_unsafe_pr_checkout: + type: boolean + required: false ci_artifacts_run_number: - required: true type: string - necessary_jobs: required: true + necessary_jobs: type: string + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number }} @@ -40,6 +46,9 @@ jobs: packages: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -112,6 +121,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -211,6 +223,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-13];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -310,6 +325,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -409,6 +427,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-13];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -508,6 +529,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -607,6 +631,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-13];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -706,6 +733,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -805,6 +835,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-13];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -904,6 +937,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1003,6 +1039,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-13];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1102,6 +1141,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1201,6 +1243,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Jemalloc [debian-13];') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1318,6 +1363,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} diff --git a/.github/workflows/ci-cd-build-packages.yml.erb b/.github/workflows/ci-cd-build-packages.yml.erb index b31f3a6..d9094c8 100644 --- a/.github/workflows/ci-cd-build-packages.yml.erb +++ b/.github/workflows/ci-cd-build-packages.yml.erb @@ -5,12 +5,18 @@ name: 'CI/CD: build packages [<%= part_number %>]' on: workflow_call: inputs: + git_commit: + type: string + required: false + allow_unsafe_pr_checkout: + type: boolean + required: false ci_artifacts_run_number: - required: true type: string - necessary_jobs: required: true + necessary_jobs: type: string + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number }} @@ -31,6 +37,9 @@ jobs: packages: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -119,6 +128,9 @@ jobs: <% end %> - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -232,6 +244,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} diff --git a/.github/workflows/ci-cd-contributor.yml b/.github/workflows/ci-cd-contributor.yml new file mode 100644 index 0000000..fb5907e --- /dev/null +++ b/.github/workflows/ci-cd-contributor.yml @@ -0,0 +1,391 @@ +# WARNING: DO NOT EDIT THIS FILE!!! +# +# This file is autogenerated from .github/workflows/ci-cd-contributor.yml.erb +# by ./internal-scripts/generate-ci-cd-yaml.rb. +# Please edit the .erb file instead, then regenerate YAML +# by running that script. +# +# TIP: run this on your development machine to ensure generate-ci-cd-yaml.rb +# is run automatically as a Git pre-commit hook: +# +# git config core.hooksPath .githooks + +# Security invariant: the contributor pipeline is split across three workflows. +# +# ci-cd-main - Privileged (secrets, OIDC, write tokens). Runs on +# push to upstream branches, and on pull_request_target +# when a maintainer applies the ok-to-test label. +# Checks out PR head only when label-gated. +# ci-cd-contributor - Unprivileged. Runs on pull_request for fork PRs and +# on push in forks. No secrets. Safe on arbitrary +# contributor commits. +# ci-cd-label-guard - Strips ok-to-test on every push to a labeled PR +# (pull_request_target: synchronize), forcing +# maintainer re-review before the privileged +# pipeline re-runs. +# +# Changing triggers, if-guards, or the label name in any of these files +# without considering the others can break the security model. + +name: 'CI/CD: contributor' + +on: + push: + paths-ignore: + - '**.md' + - 'dev-handbook/**' + pull_request: + paths-ignore: + - '**.md' + - 'dev-handbook/**' + workflow_dispatch: + +jobs: + lint: + name: Check whether workflow is up-to-date + runs-on: ubuntu-24.04 + if: > + github.repository != 'fullstaq-ruby/server-edition' + || (github.event_name == 'pull_request' + && github.event.pull_request.head.repo.full_name != github.repository) + timeout-minutes: 10 + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0 + with: + ruby-version: '3.3' + - name: Check + run: ./internal-scripts/ci-cd/check-workflow-uptodate/check.sh + + + build_images: + name: 'Build Docker image [${{ matrix.distro }}]' + needs: lint + runs-on: ubuntu-24.04 + if: > + github.repository != 'fullstaq-ruby/server-edition' + || (github.event_name == 'pull_request' + && github.event.pull_request.head.repo.full_name != github.repository) + timeout-minutes: 30 + strategy: + fail-fast: false + matrix: + include: + - distro: 'ubuntu-24.04' + image_name: 'ghcr.io/fullstaq-ruby/server-edition-ci-images' + image_tag: 'ubuntu-24.04-v2' + source_dir: 'environments/ubuntu-24.04' + artifact_name: 'docker-image-ubuntu-24.04' + - distro: 'el-9' + image_name: 'ghcr.io/fullstaq-ruby/server-edition-ci-images' + image_tag: 'el-9-v2' + source_dir: 'environments/el-9' + artifact_name: 'docker-image-el-9' + - distro: 'utility' + image_name: 'ghcr.io/fullstaq-ruby/server-edition-ci-images' + image_tag: 'utility-v3' + source_dir: 'environments/utility' + artifact_name: 'docker-image-utility' + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - name: Build Docker image + run: ./internal-scripts/ci-cd/build-docker-images/build.sh + env: + IMAGE_NAME: '${{ matrix.image_name }}' + IMAGE_TAG: '${{ matrix.image_tag }}' + SOURCE_DIR: '${{ matrix.source_dir }}' + - name: Dump Docker image + run: ./internal-scripts/ci-cd/build-docker-images/dump-image.sh + env: + IMAGE_NAME: '${{ matrix.image_name }}' + IMAGE_TAG: '${{ matrix.image_tag }}' + - name: Upload Docker image artifact + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + with: + name: '${{ matrix.artifact_name }}' + path: output + retention-days: 1 + + + build_packages: + name: 'Build packages [${{ matrix.distro }}]' + needs: build_images + runs-on: ubuntu-24.04 + if: > + github.repository != 'fullstaq-ruby/server-edition' + || (github.event_name == 'pull_request' + && github.event.pull_request.head.repo.full_name != github.repository) + timeout-minutes: 60 + strategy: + fail-fast: false + matrix: + include: + - distro: 'ubuntu-24.04' + package_format: 'DEB' + image_artifact_name: 'docker-image-ubuntu-24.04' + - distro: 'el-9' + package_format: 'RPM' + image_artifact_name: 'docker-image-el-9' + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + + ### Download and load Docker images ### + + - name: Download distro Docker image + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: '${{ matrix.image_artifact_name }}' + path: docker-image-distro + - name: Load distro Docker image + run: ./internal-scripts/ci-cd/load-docker-image.sh + env: + TARBALL: docker-image-distro/image.tar.zst + - name: Download utility Docker image + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: 'docker-image-utility' + path: docker-image-utility + - name: Load utility Docker image + run: ./internal-scripts/ci-cd/load-docker-image.sh + env: + TARBALL: docker-image-utility/image.tar.zst + + ### Download sources ### + + - name: Download Ruby source + run: curl -fsSL -o ruby-src.tar.gz 'https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.6.tar.gz' + - name: Download Jemalloc source + run: curl -fsSL -o jemalloc-src.tar.bz2 'https://github.com/jemalloc/jemalloc/releases/download/3.6.0/jemalloc-3.6.0.tar.bz2' + + ### Build Jemalloc ### + + - name: Build Jemalloc + run: | + ./build-jemalloc \ + -n '${{ matrix.distro }}' \ + -s "$(pwd)/jemalloc-src.tar.bz2" \ + -o "$(pwd)/jemalloc-bin.tar.gz" \ + -j 2 + + ### Build Ruby binaries ### + + - name: 'Build Ruby binaries [${{ matrix.distro }}/normal]' + run: | + ./build-ruby \ + -n '${{ matrix.distro }}' \ + -s "$(pwd)/ruby-src.tar.gz" \ + -v '4.0' \ + -o "$(pwd)/ruby-bin-normal.tar.gz" \ + -j 2 + + - name: 'Build Ruby binaries [${{ matrix.distro }}/jemalloc]' + run: | + ./build-ruby \ + -n '${{ matrix.distro }}' \ + -s "$(pwd)/ruby-src.tar.gz" \ + -v '4.0' \ + -o "$(pwd)/ruby-bin-jemalloc.tar.gz" \ + -m "$(pwd)/jemalloc-bin.tar.gz" \ + -j 2 + + - name: Create packages directory + run: mkdir -p packages + + ### Build Ruby packages ### + + - name: 'Build Ruby DEB [${{ matrix.distro }}/normal]' + if: matrix.package_format == 'DEB' + run: | + ./build-ruby-deb \ + -b "$(pwd)/ruby-bin-normal.tar.gz" \ + -o "$(pwd)/packages/fullstaq-ruby-4.0_4-${{ matrix.distro }}_amd64.deb" \ + -r '4' + - name: 'Build Ruby RPM [${{ matrix.distro }}/normal]' + if: matrix.package_format == 'RPM' + run: | + SANITIZED_DISTRO=$(echo '${{ matrix.distro }}' | tr -d '-') + ./build-ruby-rpm \ + -b "$(pwd)/ruby-bin-normal.tar.gz" \ + -o "$(pwd)/packages/fullstaq-ruby-4.0-rev4-${SANITIZED_DISTRO}.x86_64.rpm" \ + -r '4' + + - name: 'Build Ruby DEB [${{ matrix.distro }}/jemalloc]' + if: matrix.package_format == 'DEB' + run: | + ./build-ruby-deb \ + -b "$(pwd)/ruby-bin-jemalloc.tar.gz" \ + -o "$(pwd)/packages/fullstaq-ruby-4.0-jemalloc_4-${{ matrix.distro }}_amd64.deb" \ + -r '4' + - name: 'Build Ruby RPM [${{ matrix.distro }}/jemalloc]' + if: matrix.package_format == 'RPM' + run: | + SANITIZED_DISTRO=$(echo '${{ matrix.distro }}' | tr -d '-') + ./build-ruby-rpm \ + -b "$(pwd)/ruby-bin-jemalloc.tar.gz" \ + -o "$(pwd)/packages/fullstaq-ruby-4.0-jemalloc-rev4-${SANITIZED_DISTRO}.x86_64.rpm" \ + -r '4' + + ### Upload packages ### + + - name: Upload packages + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + with: + name: 'contributor-packages-${{ matrix.distro }}' + path: packages + retention-days: 1 + + + build_common_packages: + name: Build common and rbenv packages + needs: build_images + runs-on: ubuntu-24.04 + if: > + github.repository != 'fullstaq-ruby/server-edition' + || (github.event_name == 'pull_request' + && github.event.pull_request.head.repo.full_name != github.repository) + timeout-minutes: 30 + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + + - name: Download utility Docker image + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: 'docker-image-utility' + path: docker-image-utility + - name: Load utility Docker image + run: ./internal-scripts/ci-cd/load-docker-image.sh + env: + TARBALL: docker-image-utility/image.tar.zst + + - name: Clone Rbenv source + run: | + git clone 'https://github.com/fullstaq-ruby/rbenv.git' rbenv-src + cd rbenv-src + git checkout 'fbaa15993171bf' + + - name: Create packages directory + run: mkdir -p packages + + - name: Build Rbenv DEB + run: | + ./build-rbenv-deb \ + -s "$(pwd)/rbenv-src" \ + -o "$(pwd)/packages/fullstaq-rbenv_1.1.2-16-1_all.deb" \ + -n '1.1.2-16' \ + -r '1' + - name: Build Rbenv RPM + run: | + ./build-rbenv-rpm \ + -s "$(pwd)/rbenv-src" \ + -o "$(pwd)/packages/fullstaq-rbenv-1.1.2_16-1.noarch.rpm" \ + -n '1.1.2-16' \ + -r '1' + - name: Build common DEB + run: | + ./build-common-deb \ + -o "$(pwd)/packages/fullstaq-ruby-common_1.0-1_all.deb" + - name: Build common RPM + run: | + ./build-common-rpm \ + -o "$(pwd)/packages/fullstaq-ruby-common-1.0-1.noarch.rpm" + + - name: Upload packages + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + with: + name: contributor-packages-common + path: packages + retention-days: 1 + + + test_packages: + name: 'Test [${{ matrix.distro }}/${{ matrix.variant }}]' + needs: + - build_packages + - build_common_packages + runs-on: ubuntu-24.04 + if: > + github.repository != 'fullstaq-ruby/server-edition' + || (github.event_name == 'pull_request' + && github.event.pull_request.head.repo.full_name != github.repository) + timeout-minutes: 30 + strategy: + fail-fast: false + matrix: + include: + - distro: 'ubuntu-24.04' + variant: 'normal' + test_image: 'ubuntu:24.04' + package_format: 'DEB' + - distro: 'ubuntu-24.04' + variant: 'jemalloc' + test_image: 'ubuntu:24.04' + package_format: 'DEB' + - distro: 'el-9' + variant: 'normal' + test_image: 'rockylinux:9' + package_format: 'RPM' + - distro: 'el-9' + variant: 'jemalloc' + test_image: 'rockylinux:9' + package_format: 'RPM' + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + + - name: Download distro packages + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: 'contributor-packages-${{ matrix.distro }}' + path: packages + - name: Download common packages + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: contributor-packages-common + path: packages + + - name: Download utility Docker image + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: 'docker-image-utility' + path: docker-image-utility + - name: Load utility Docker image + run: ./internal-scripts/ci-cd/load-docker-image.sh + env: + TARBALL: docker-image-utility/image.tar.zst + + - name: Determine Ruby package filename + id: ruby_pkg + run: | + VARIANT="${{ matrix.variant }}" + DISTRO="${{ matrix.distro }}" + FORMAT="${{ matrix.package_format }}" + if [ "$VARIANT" = "normal" ]; then + VARIANT_SUFFIX="" + else + VARIANT_SUFFIX="-${VARIANT}" + fi + if [ "$FORMAT" = "DEB" ]; then + FILENAME="fullstaq-ruby-4.0${VARIANT_SUFFIX}_4-${DISTRO}_amd64.deb" + else + SANITIZED_DISTRO=$(echo "$DISTRO" | tr -d '-') + FILENAME="fullstaq-ruby-4.0${VARIANT_SUFFIX}-rev4-${SANITIZED_DISTRO}.x86_64.rpm" + fi + echo "filename=${FILENAME}" >> "$GITHUB_OUTPUT" + + - name: Test DEBs + if: matrix.package_format == 'DEB' + run: | + ./test-debs \ + -i '${{ matrix.test_image }}' \ + -v '${{ matrix.variant }}' \ + -r "$(pwd)/packages/${{ steps.ruby_pkg.outputs.filename }}" \ + -b "$(pwd)/packages/fullstaq-rbenv_1.1.2-16-1_all.deb" \ + -c "$(pwd)/packages/fullstaq-ruby-common_1.0-1_all.deb" + - name: Test RPMs + if: matrix.package_format == 'RPM' + run: | + ./test-rpms \ + -i '${{ matrix.test_image }}' \ + -v '${{ matrix.variant }}' \ + -r "$(pwd)/packages/${{ steps.ruby_pkg.outputs.filename }}" \ + -b "$(pwd)/packages/fullstaq-rbenv-1.1.2_16-1.noarch.rpm" \ + -c "$(pwd)/packages/fullstaq-ruby-common-1.0-1.noarch.rpm" diff --git a/.github/workflows/ci-cd-contributor.yml.erb b/.github/workflows/ci-cd-contributor.yml.erb new file mode 100644 index 0000000..2052aeb --- /dev/null +++ b/.github/workflows/ci-cd-contributor.yml.erb @@ -0,0 +1,355 @@ +<%= editing_warning_comment('ci-cd-contributor') %> +<%- rpv = latest_ruby_package_version -%> + +# Security invariant: the contributor pipeline is split across three workflows. +# +# ci-cd-main - Privileged (secrets, OIDC, write tokens). Runs on +# push to upstream branches, and on pull_request_target +# when a maintainer applies the ok-to-test label. +# Checks out PR head only when label-gated. +# ci-cd-contributor - Unprivileged. Runs on pull_request for fork PRs and +# on push in forks. No secrets. Safe on arbitrary +# contributor commits. +# ci-cd-label-guard - Strips ok-to-test on every push to a labeled PR +# (pull_request_target: synchronize), forcing +# maintainer re-review before the privileged +# pipeline re-runs. +# +# Changing triggers, if-guards, or the label name in any of these files +# without considering the others can break the security model. + +name: 'CI/CD: contributor' + +on: + push: + paths-ignore: + - '**.md' + - 'dev-handbook/**' + pull_request: + paths-ignore: + - '**.md' + - 'dev-handbook/**' + workflow_dispatch: + +jobs: + lint: + name: Check whether workflow is up-to-date + runs-on: ubuntu-24.04 + if: > + github.repository != 'fullstaq-ruby/server-edition' + || (github.event_name == 'pull_request' + && github.event.pull_request.head.repo.full_name != github.repository) + timeout-minutes: 10 + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0 + with: + ruby-version: '3.3' + - name: Check + run: ./internal-scripts/ci-cd/check-workflow-uptodate/check.sh + + + build_images: + name: 'Build Docker image [${{ matrix.distro }}]' + needs: lint + runs-on: ubuntu-24.04 + if: > + github.repository != 'fullstaq-ruby/server-edition' + || (github.event_name == 'pull_request' + && github.event.pull_request.head.repo.full_name != github.repository) + timeout-minutes: 30 + strategy: + fail-fast: false + matrix: + include: + <%- contributor_distributions.each do |distro| -%> + <%- image = docker_images.find { |img| img[:id] == distro[:name] } -%> + - distro: '<%= distro[:name] %>' + image_name: '<%= image[:name] %>' + image_tag: '<%= image[:tag] %>' + source_dir: 'environments/<%= image[:id] %>' + artifact_name: '<%= docker_image_artifact_name(distro[:name]) %>' + <%- end -%> + <%- utility_image = docker_images.find { |img| img[:id] == 'utility' } -%> + - distro: 'utility' + image_name: '<%= utility_image[:name] %>' + image_tag: '<%= utility_image[:tag] %>' + source_dir: 'environments/utility' + artifact_name: '<%= docker_image_artifact_name('utility') %>' + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - name: Build Docker image + run: ./internal-scripts/ci-cd/build-docker-images/build.sh + env: + IMAGE_NAME: '${{ matrix.image_name }}' + IMAGE_TAG: '${{ matrix.image_tag }}' + SOURCE_DIR: '${{ matrix.source_dir }}' + - name: Dump Docker image + run: ./internal-scripts/ci-cd/build-docker-images/dump-image.sh + env: + IMAGE_NAME: '${{ matrix.image_name }}' + IMAGE_TAG: '${{ matrix.image_tag }}' + - name: Upload Docker image artifact + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + with: + name: '${{ matrix.artifact_name }}' + path: output + retention-days: 1 + + + build_packages: + name: 'Build packages [${{ matrix.distro }}]' + needs: build_images + runs-on: ubuntu-24.04 + if: > + github.repository != 'fullstaq-ruby/server-edition' + || (github.event_name == 'pull_request' + && github.event.pull_request.head.repo.full_name != github.repository) + timeout-minutes: 60 + strategy: + fail-fast: false + matrix: + include: + <%- contributor_distributions.each do |distro| -%> + - distro: '<%= distro[:name] %>' + package_format: '<%= distro[:package_format] %>' + image_artifact_name: '<%= docker_image_artifact_name(distro[:name]) %>' + <%- end -%> + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + + ### Download and load Docker images ### + + - name: Download distro Docker image + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: '${{ matrix.image_artifact_name }}' + path: docker-image-distro + - name: Load distro Docker image + run: ./internal-scripts/ci-cd/load-docker-image.sh + env: + TARBALL: docker-image-distro/image.tar.zst + - name: Download utility Docker image + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: '<%= docker_image_artifact_name('utility') %>' + path: docker-image-utility + - name: Load utility Docker image + run: ./internal-scripts/ci-cd/load-docker-image.sh + env: + TARBALL: docker-image-utility/image.tar.zst + + ### Download sources ### + + - name: Download Ruby source + run: curl -fsSL -o ruby-src.tar.gz '<%= ruby_source_url(rpv[:full_version]) %>' + - name: Download Jemalloc source + run: curl -fsSL -o jemalloc-src.tar.bz2 '<%= jemalloc_source_url %>' + + ### Build Jemalloc ### + + - name: Build Jemalloc + run: | + ./build-jemalloc \ + -n '${{ matrix.distro }}' \ + -s "$(pwd)/jemalloc-src.tar.bz2" \ + -o "$(pwd)/jemalloc-bin.tar.gz" \ + -j 2 + + ### Build Ruby binaries ### + + <%- variants_for_ruby_version(rpv).each do |variant| -%> + - name: 'Build Ruby binaries [${{ matrix.distro }}/<%= variant[:name] %>]' + run: | + ./build-ruby \ + -n '${{ matrix.distro }}' \ + -s "$(pwd)/ruby-src.tar.gz" \ + -v '<%= rpv[:id] %>' \ + -o "$(pwd)/ruby-bin-<%= variant[:name] %>.tar.gz" \ + <%- if variant[:name] == 'jemalloc' -%> + -m "$(pwd)/jemalloc-bin.tar.gz" \ + <%- elsif variant[:name] == 'malloctrim' -%> + -t \ + <%- end -%> + -j 2 + + <%- end -%> + - name: Create packages directory + run: mkdir -p packages + + ### Build Ruby packages ### + + <%- variants_for_ruby_version(rpv).each do |variant| -%> + - name: 'Build Ruby DEB [${{ matrix.distro }}/<%= variant[:name] %>]' + if: matrix.package_format == 'DEB' + run: | + ./build-ruby-deb \ + -b "$(pwd)/ruby-bin-<%= variant[:name] %>.tar.gz" \ + -o "$(pwd)/packages/fullstaq-ruby-<%= rpv[:id] %><%= variant[:package_suffix] %>_<%= rpv[:package_revision] %>-${{ matrix.distro }}_amd64.deb" \ + -r '<%= rpv[:package_revision] %>' + - name: 'Build Ruby RPM [${{ matrix.distro }}/<%= variant[:name] %>]' + if: matrix.package_format == 'RPM' + run: | + SANITIZED_DISTRO=$(echo '${{ matrix.distro }}' | tr -d '-') + ./build-ruby-rpm \ + -b "$(pwd)/ruby-bin-<%= variant[:name] %>.tar.gz" \ + -o "$(pwd)/packages/fullstaq-ruby-<%= rpv[:id] %><%= variant[:package_suffix] %>-rev<%= rpv[:package_revision] %>-${SANITIZED_DISTRO}.x86_64.rpm" \ + -r '<%= rpv[:package_revision] %>' + + <%- end -%> + ### Upload packages ### + + - name: Upload packages + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + with: + name: 'contributor-packages-${{ matrix.distro }}' + path: packages + retention-days: 1 + + + build_common_packages: + name: Build common and rbenv packages + needs: build_images + runs-on: ubuntu-24.04 + if: > + github.repository != 'fullstaq-ruby/server-edition' + || (github.event_name == 'pull_request' + && github.event.pull_request.head.repo.full_name != github.repository) + timeout-minutes: 30 + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + + - name: Download utility Docker image + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: '<%= docker_image_artifact_name('utility') %>' + path: docker-image-utility + - name: Load utility Docker image + run: ./internal-scripts/ci-cd/load-docker-image.sh + env: + TARBALL: docker-image-utility/image.tar.zst + + - name: Clone Rbenv source + run: | + git clone '<%= config[:rbenv][:repo] %>' rbenv-src + cd rbenv-src + git checkout '<%= config[:rbenv][:ref] %>' + + - name: Create packages directory + run: mkdir -p packages + + - name: Build Rbenv DEB + run: | + ./build-rbenv-deb \ + -s "$(pwd)/rbenv-src" \ + -o "$(pwd)/packages/<%= rbenv_package_basename(:DEB) %>" \ + -n '<%= rbenv_version %>' \ + -r '<%= rbenv_package_revision %>' + - name: Build Rbenv RPM + run: | + ./build-rbenv-rpm \ + -s "$(pwd)/rbenv-src" \ + -o "$(pwd)/packages/<%= rbenv_package_basename(:RPM) %>" \ + -n '<%= rbenv_version %>' \ + -r '<%= rbenv_package_revision %>' + - name: Build common DEB + run: | + ./build-common-deb \ + -o "$(pwd)/packages/<%= common_package_basename(:DEB) %>" + - name: Build common RPM + run: | + ./build-common-rpm \ + -o "$(pwd)/packages/<%= common_package_basename(:RPM) %>" + + - name: Upload packages + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + with: + name: contributor-packages-common + path: packages + retention-days: 1 + + + test_packages: + name: 'Test [${{ matrix.distro }}/${{ matrix.variant }}]' + needs: + - build_packages + - build_common_packages + runs-on: ubuntu-24.04 + if: > + github.repository != 'fullstaq-ruby/server-edition' + || (github.event_name == 'pull_request' + && github.event.pull_request.head.repo.full_name != github.repository) + timeout-minutes: 30 + strategy: + fail-fast: false + matrix: + include: + <%- contributor_distributions.each do |distro| -%> + <%- variants_for_ruby_version(rpv).each do |variant| -%> + - distro: '<%= distro[:name] %>' + variant: '<%= variant[:name] %>' + test_image: '<%= distro[:test_image] %>' + package_format: '<%= distro[:package_format] %>' + <%- end -%> + <%- end -%> + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + + - name: Download distro packages + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: 'contributor-packages-${{ matrix.distro }}' + path: packages + - name: Download common packages + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: contributor-packages-common + path: packages + + - name: Download utility Docker image + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: '<%= docker_image_artifact_name('utility') %>' + path: docker-image-utility + - name: Load utility Docker image + run: ./internal-scripts/ci-cd/load-docker-image.sh + env: + TARBALL: docker-image-utility/image.tar.zst + + - name: Determine Ruby package filename + id: ruby_pkg + run: | + VARIANT="${{ matrix.variant }}" + DISTRO="${{ matrix.distro }}" + FORMAT="${{ matrix.package_format }}" + if [ "$VARIANT" = "normal" ]; then + VARIANT_SUFFIX="" + else + VARIANT_SUFFIX="-${VARIANT}" + fi + if [ "$FORMAT" = "DEB" ]; then + FILENAME="fullstaq-ruby-<%= rpv[:id] %>${VARIANT_SUFFIX}_<%= rpv[:package_revision] %>-${DISTRO}_amd64.deb" + else + SANITIZED_DISTRO=$(echo "$DISTRO" | tr -d '-') + FILENAME="fullstaq-ruby-<%= rpv[:id] %>${VARIANT_SUFFIX}-rev<%= rpv[:package_revision] %>-${SANITIZED_DISTRO}.x86_64.rpm" + fi + echo "filename=${FILENAME}" >> "$GITHUB_OUTPUT" + + - name: Test DEBs + if: matrix.package_format == 'DEB' + run: | + ./test-debs \ + -i '${{ matrix.test_image }}' \ + -v '${{ matrix.variant }}' \ + -r "$(pwd)/packages/${{ steps.ruby_pkg.outputs.filename }}" \ + -b "$(pwd)/packages/<%= rbenv_package_basename(:DEB) %>" \ + -c "$(pwd)/packages/<%= common_package_basename(:DEB) %>" + - name: Test RPMs + if: matrix.package_format == 'RPM' + run: | + ./test-rpms \ + -i '${{ matrix.test_image }}' \ + -v '${{ matrix.variant }}' \ + -r "$(pwd)/packages/${{ steps.ruby_pkg.outputs.filename }}" \ + -b "$(pwd)/packages/<%= rbenv_package_basename(:RPM) %>" \ + -c "$(pwd)/packages/<%= common_package_basename(:RPM) %>" diff --git a/.github/workflows/ci-cd-label-guard.yml b/.github/workflows/ci-cd-label-guard.yml new file mode 100644 index 0000000..c23870e --- /dev/null +++ b/.github/workflows/ci-cd-label-guard.yml @@ -0,0 +1,51 @@ +# Security invariant: the contributor pipeline is split across three workflows. +# +# ci-cd-main - Privileged (secrets, OIDC, write tokens). Runs on +# push to upstream branches, and on pull_request_target +# when a maintainer applies the ok-to-test label. +# Checks out PR head only when label-gated. +# ci-cd-contributor - Unprivileged. Runs on pull_request for fork PRs and +# on push in forks. No secrets. Safe on arbitrary +# contributor commits. +# ci-cd-label-guard - This file. Strips ok-to-test on every push to a +# labeled PR (pull_request_target: synchronize), +# forcing maintainer re-review before the privileged +# pipeline re-runs. +# +# Changing triggers, if-guards, or the label name in any of these files +# without considering the others can break the security model. + +name: 'CI/CD: label guard' + +on: + pull_request_target: + types: [synchronize] + +jobs: + remove_ok_to_test: + name: Remove ok-to-test label on new push + runs-on: ubuntu-24.04 + permissions: + pull-requests: write + steps: + - name: Remove ok-to-test label if present + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 + with: + script: | + const { owner, repo } = context.repo; + const issue_number = context.payload.pull_request.number; + try { + await github.rest.issues.removeLabel({ + owner, + repo, + issue_number, + name: 'ok-to-test' + }); + console.log('Removed ok-to-test label'); + } catch (e) { + if (e.status === 404) { + console.log('Label ok-to-test not present, nothing to remove'); + } else { + throw e; + } + } diff --git a/.github/workflows/ci-cd-main.yml b/.github/workflows/ci-cd-main.yml index 0e9e9f4..5001467 100644 --- a/.github/workflows/ci-cd-main.yml +++ b/.github/workflows/ci-cd-main.yml @@ -10,6 +10,23 @@ # # git config core.hooksPath .githooks +# Security invariant: the contributor pipeline is split across three workflows. +# +# ci-cd-main - Privileged (secrets, OIDC, write tokens). Runs on +# push to upstream branches, and on pull_request_target +# when a maintainer applies the ok-to-test label. +# Checks out PR head only when label-gated. +# ci-cd-contributor - Unprivileged. Runs on pull_request for fork PRs and +# on push in forks. No secrets. Safe on arbitrary +# contributor commits. +# ci-cd-label-guard - Strips ok-to-test on every push to a labeled PR +# (pull_request_target: synchronize), forcing +# maintainer re-review before the privileged +# pipeline re-runs. +# +# Changing triggers, if-guards, or the label name in any of these files +# without considering the others can break the security model. + name: 'CI/CD: main' on: @@ -22,6 +39,11 @@ on: paths-ignore: - '**.md' - 'dev-handbook/**' + pull_request_target: + types: [labeled] + paths-ignore: + - '**.md' + - 'dev-handbook/**' env: ## Set the following variable to a specific number to make the @@ -39,11 +61,16 @@ jobs: determine_necessary_jobs: name: Determine necessary jobs runs-on: ubuntu-24.04 + if: > + github.repository == 'fullstaq-ruby/server-edition' + && (github.event_name != 'pull_request_target' + || github.event.label.name == 'ok-to-test') environment: test permissions: id-token: write packages: read outputs: + git_commit: ${{ steps.checkout.outputs.commit }} ci_artifacts_run_number: ${{ steps.get_ci_artifacts_run_number.outputs.number }} necessary_jobs: ${{ steps.check.outputs.necessary_jobs }} steps: @@ -53,7 +80,11 @@ jobs: exit 1 if: github.event_name == 'push' && github.ref == 'refs/heads/fix/cicd-new-workflows' - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - id: checkout + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }} + allow-unsafe-pr-checkout: ${{ github.event_name == 'pull_request_target' }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -83,8 +114,15 @@ jobs: check_workflow_uptodate: name: Check whether workflow is up-to-date runs-on: ubuntu-24.04 + if: > + github.repository == 'fullstaq-ruby/server-edition' + && (github.event_name != 'pull_request_target' + || github.event.label.name == 'ok-to-test') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }} + allow-unsafe-pr-checkout: ${{ github.event_name == 'pull_request_target' }} - name: Check run: ./internal-scripts/ci-cd/check-workflow-uptodate/check.sh @@ -100,8 +138,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-prepare.yml with: - ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} - necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} + ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} + necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} @@ -117,12 +157,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-build-packages-1.yml with: + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} - # # Run even if a transitively dependent job has been skipped - # if: | - # needs.prepare.result == 'success' - # && !failure() && !cancelled() build_packages_2: name: Build [2] @@ -135,12 +173,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-build-packages-2.yml with: + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} - # # Run even if a transitively dependent job has been skipped - # if: | - # needs.prepare.result == 'success' - # && !failure() && !cancelled() build_packages_3: name: Build [3] @@ -153,12 +189,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-build-packages-3.yml with: + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} - # # Run even if a transitively dependent job has been skipped - # if: | - # needs.prepare.result == 'success' - # && !failure() && !cancelled() build_packages_4: name: Build [4] @@ -171,12 +205,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-build-packages-4.yml with: + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} - # # Run even if a transitively dependent job has been skipped - # if: | - # needs.prepare.result == 'success' - # && !failure() && !cancelled() publish_test: @@ -199,8 +231,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-publish-test-test.yml with: - ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} - necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} + ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} + necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} publish_production: @@ -216,5 +250,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-publish-test-production.yml with: - ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} - necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} + ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} + necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} + # For pull_request_target events, github.ref refers to the base branch, not the contributor branch, + # so we can't check for `github.ref == 'refs/heads/main'` to determine whether to release to production. + release: ${{ (github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/main' }} diff --git a/.github/workflows/ci-cd-main.yml.erb b/.github/workflows/ci-cd-main.yml.erb index 1ad4698..38db5d7 100644 --- a/.github/workflows/ci-cd-main.yml.erb +++ b/.github/workflows/ci-cd-main.yml.erb @@ -1,5 +1,22 @@ <%= editing_warning_comment('ci-cd-main') %> +# Security invariant: the contributor pipeline is split across three workflows. +# +# ci-cd-main - Privileged (secrets, OIDC, write tokens). Runs on +# push to upstream branches, and on pull_request_target +# when a maintainer applies the ok-to-test label. +# Checks out PR head only when label-gated. +# ci-cd-contributor - Unprivileged. Runs on pull_request for fork PRs and +# on push in forks. No secrets. Safe on arbitrary +# contributor commits. +# ci-cd-label-guard - Strips ok-to-test on every push to a labeled PR +# (pull_request_target: synchronize), forcing +# maintainer re-review before the privileged +# pipeline re-runs. +# +# Changing triggers, if-guards, or the label name in any of these files +# without considering the others can break the security model. + name: 'CI/CD: main' on: @@ -12,6 +29,11 @@ on: paths-ignore: - '**.md' - 'dev-handbook/**' + pull_request_target: + types: [labeled] + paths-ignore: + - '**.md' + - 'dev-handbook/**' env: ## Set the following variable to a specific number to make the @@ -29,11 +51,16 @@ jobs: determine_necessary_jobs: name: Determine necessary jobs runs-on: ubuntu-24.04 + if: > + github.repository == 'fullstaq-ruby/server-edition' + && (github.event_name != 'pull_request_target' + || github.event.label.name == 'ok-to-test') environment: test permissions: id-token: write packages: read outputs: + git_commit: ${{ steps.checkout.outputs.commit }} ci_artifacts_run_number: ${{ steps.get_ci_artifacts_run_number.outputs.number }} necessary_jobs: ${{ steps.check.outputs.necessary_jobs }} steps: @@ -43,7 +70,11 @@ jobs: exit 1 if: github.event_name == 'push' && github.ref == 'refs/heads/fix/cicd-new-workflows' - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - id: checkout + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }} + allow-unsafe-pr-checkout: ${{ github.event_name == 'pull_request_target' }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -73,8 +104,15 @@ jobs: check_workflow_uptodate: name: Check whether workflow is up-to-date runs-on: ubuntu-24.04 + if: > + github.repository == 'fullstaq-ruby/server-edition' + && (github.event_name != 'pull_request_target' + || github.event.label.name == 'ok-to-test') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }} + allow-unsafe-pr-checkout: ${{ github.event_name == 'pull_request_target' }} - name: Check run: ./internal-scripts/ci-cd/check-workflow-uptodate/check.sh @@ -90,8 +128,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-prepare.yml with: - ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} - necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} + ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} + necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} <%- distribution_buckets.each_with_index do |distributions, i| %> @@ -107,12 +147,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-build-packages-<%= i + 1 %>.yml with: + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} - # # Run even if a transitively dependent job has been skipped - # if: | - # needs.prepare.result == 'success' - # && !failure() && !cancelled() <%- end -%> <%- end %> @@ -131,8 +169,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-publish-test-test.yml with: - ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} - necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} + ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} + necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} publish_production: @@ -148,5 +188,10 @@ jobs: secrets: inherit uses: ./.github/workflows/ci-cd-publish-test-production.yml with: - ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} - necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} + git_commit: ${{ needs.determine_necessary_jobs.outputs.git_commit }} + allow_unsafe_pr_checkout: ${{ github.event_name == 'pull_request_target' }} + ci_artifacts_run_number: ${{ needs.determine_necessary_jobs.outputs.ci_artifacts_run_number }} + necessary_jobs: ${{ needs.determine_necessary_jobs.outputs.necessary_jobs }} + # For pull_request_target events, github.ref refers to the base branch, not the contributor branch, + # so we can't check for `github.ref == 'refs/heads/main'` to determine whether to release to production. + release: ${{ (github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/main' }} diff --git a/.github/workflows/ci-cd-prepare.yml b/.github/workflows/ci-cd-prepare.yml index 8f93e34..a6c18d5 100644 --- a/.github/workflows/ci-cd-prepare.yml +++ b/.github/workflows/ci-cd-prepare.yml @@ -15,12 +15,18 @@ name: 'CI/CD: prepare' on: workflow_call: inputs: - ci_artifacts_run_number: + git_commit: type: string required: false - necessary_jobs: + allow_unsafe_pr_checkout: + type: boolean + required: false + ci_artifacts_run_number: + type: string required: true + necessary_jobs: type: string + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number }} @@ -46,6 +52,8 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -102,6 +110,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Install gem bundle;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -138,6 +149,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Build Docker image centos-8;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -180,6 +194,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Build Docker image debian-11;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -222,6 +239,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Build Docker image debian-12;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -264,6 +284,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Build Docker image debian-13;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -306,6 +329,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Build Docker image el-9;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -348,6 +374,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Build Docker image ubuntu-22.04;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -390,6 +419,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Build Docker image ubuntu-24.04;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -432,6 +464,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Build Docker image utility;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -479,6 +514,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Download Ruby source 4.0.6;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -513,6 +551,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Download Ruby source 3.4.10;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -547,6 +588,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Download Ruby source 3.3.12;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -581,6 +625,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Download Ruby source 3.2.11;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -617,6 +664,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Download Rbenv source;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -671,6 +721,9 @@ jobs: && contains(inputs.necessary_jobs.outputs.necessary_jobs, ';Build Docker image utility;') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -738,6 +791,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Docker image utility;') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -813,6 +869,9 @@ jobs: ) - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -893,6 +952,9 @@ jobs: ) - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -977,6 +1039,9 @@ jobs: if: 'always()' steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} diff --git a/.github/workflows/ci-cd-prepare.yml.erb b/.github/workflows/ci-cd-prepare.yml.erb index ee15b07..0fcab26 100644 --- a/.github/workflows/ci-cd-prepare.yml.erb +++ b/.github/workflows/ci-cd-prepare.yml.erb @@ -5,12 +5,18 @@ name: 'CI/CD: prepare' on: workflow_call: inputs: - ci_artifacts_run_number: + git_commit: type: string required: false - necessary_jobs: + allow_unsafe_pr_checkout: + type: boolean + required: false + ci_artifacts_run_number: + type: string required: true + necessary_jobs: type: string + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number }} @@ -36,6 +42,8 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -92,6 +100,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Install gem bundle;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -129,6 +140,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Build Docker image <%= image[:id] %>;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -178,6 +192,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Download Ruby source <%= ruby_version %>;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -216,6 +233,9 @@ jobs: if: contains(inputs.necessary_jobs, ';Download Rbenv source;') steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -270,6 +290,9 @@ jobs: && contains(inputs.necessary_jobs.outputs.necessary_jobs, ';Build Docker image utility;') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -337,6 +360,9 @@ jobs: && contains(inputs.necessary_jobs, ';Build Docker image utility;') - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -412,6 +438,9 @@ jobs: ) - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -492,6 +521,9 @@ jobs: ) - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -570,6 +602,9 @@ jobs: if: 'always()' steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 with: tenant-id: ${{ vars.AZURE_TENANT_ID }} diff --git a/.github/workflows/ci-cd-publish-test-production.yml b/.github/workflows/ci-cd-publish-test-production.yml index 0aaa410..162fce4 100644 --- a/.github/workflows/ci-cd-publish-test-production.yml +++ b/.github/workflows/ci-cd-publish-test-production.yml @@ -15,12 +15,21 @@ name: 'CI/CD: publish & test against production repos' on: workflow_call: inputs: + git_commit: + type: string + required: false + allow_unsafe_pr_checkout: + type: boolean + required: false ci_artifacts_run_number: - required: true type: string - necessary_jobs: required: true + necessary_jobs: type: string + required: true + release: + type: boolean + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number || github.run_number }} @@ -40,6 +49,8 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - name: Clean disk space run: ./internal-scripts/ci-cd/publish/clean-disk-space.sh - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 @@ -98,7 +109,7 @@ jobs: CI_ARTIFACTS_BUCKET_NAME: ${{ vars.CI_ARTIFACTS_BUCKET }} TESTING: false OVERWRITE_EXISTING: false - DRY_RUN: ${{ github.ref != 'refs/heads/main' }} + DRY_RUN: ${{ !inputs.release }} CLEANUP: true - name: Upload RPMs to repo @@ -108,11 +119,11 @@ jobs: CI_ARTIFACTS_BUCKET_NAME: ${{ vars.CI_ARTIFACTS_BUCKET }} TESTING: false OVERWRITE_EXISTING: false - DRY_RUN: ${{ github.ref != 'refs/heads/main' }} + DRY_RUN: ${{ !inputs.release }} - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 id: get-id-token - if: github.ref == 'refs/heads/main' + if: inputs.release with: script: | const fs = require('fs'); @@ -125,7 +136,7 @@ jobs: - name: Restart web server run: ./internal-scripts/ci-cd/publish/restart-web-server.rb - if: github.ref == 'refs/heads/main' + if: inputs.release env: ID_TOKEN: ${{ steps.get-id-token.outputs.id_token }} @@ -142,12 +153,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/4.0/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -185,12 +199,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/4.0/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -228,12 +245,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.4/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -271,12 +291,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.4/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -314,12 +337,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.3/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -357,12 +383,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.3/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -400,12 +429,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -443,12 +475,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -486,12 +521,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -529,12 +567,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/4.0.6/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -572,12 +613,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/4.0.6/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -615,12 +659,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.4.10/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -658,12 +705,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.4.10/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -701,12 +751,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.3.12/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -744,12 +797,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.3.12/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -787,12 +843,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2.11/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -830,12 +889,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2.11/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -873,12 +935,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2.11/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -917,12 +982,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/4.0/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -960,12 +1028,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/4.0/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1003,12 +1074,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.4/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1046,12 +1120,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.4/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1089,12 +1166,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.3/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1132,12 +1212,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.3/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1175,12 +1258,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1218,12 +1304,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1261,12 +1350,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1304,12 +1396,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/4.0.6/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1347,12 +1442,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/4.0.6/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1390,12 +1488,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.4.10/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1433,12 +1534,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.4.10/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1476,12 +1580,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.3.12/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1519,12 +1626,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.3.12/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1562,12 +1672,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2.11/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1605,12 +1718,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2.11/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1648,12 +1764,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2.11/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1692,12 +1811,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/4.0/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1735,12 +1857,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/4.0/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1778,12 +1903,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.4/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1821,12 +1949,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.4/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1864,12 +1995,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.3/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1907,12 +2041,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.3/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1950,12 +2087,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1993,12 +2133,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2036,12 +2179,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2079,12 +2225,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/4.0.6/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2122,12 +2271,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/4.0.6/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2165,12 +2317,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.4.10/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2208,12 +2363,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.4.10/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2251,12 +2409,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.3.12/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2294,12 +2455,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.3.12/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2337,12 +2501,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2.11/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2380,12 +2547,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2.11/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2423,12 +2593,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2.11/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2467,12 +2640,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/4.0/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2510,12 +2686,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/4.0/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2553,12 +2732,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.4/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2596,12 +2778,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.4/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2639,12 +2824,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.3/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2682,12 +2870,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.3/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2725,12 +2916,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/4.0.6/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2768,12 +2962,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/4.0.6/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2811,12 +3008,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.4.10/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2854,12 +3054,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.4.10/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2897,12 +3100,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.3.12/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2940,12 +3146,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.3.12/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2984,12 +3193,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/4.0/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3027,12 +3239,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/4.0/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3070,12 +3285,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.4/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3113,12 +3331,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.4/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3156,12 +3377,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.3/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3199,12 +3423,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.3/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3242,12 +3469,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3285,12 +3515,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3328,12 +3561,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3371,12 +3607,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/4.0.6/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3414,12 +3653,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/4.0.6/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3457,12 +3699,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.4.10/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3500,12 +3745,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.4.10/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3543,12 +3791,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.3.12/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3586,12 +3837,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.3.12/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3629,12 +3883,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2.11/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3672,12 +3929,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2.11/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3715,12 +3975,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2.11/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3759,12 +4022,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/4.0/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3802,12 +4068,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/4.0/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3845,12 +4114,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.4/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3888,12 +4160,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.4/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3931,12 +4206,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.3/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3974,12 +4252,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.3/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4017,12 +4298,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4060,12 +4344,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4103,12 +4390,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4146,12 +4436,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/4.0.6/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4189,12 +4482,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/4.0.6/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4232,12 +4528,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.4.10/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4275,12 +4574,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.4.10/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4318,12 +4620,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.3.12/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4361,12 +4666,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.3.12/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4404,12 +4712,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2.11/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4447,12 +4758,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2.11/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4490,12 +4804,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2.11/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4534,12 +4851,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/4.0/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4577,12 +4897,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/4.0/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4620,12 +4943,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.4/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4663,12 +4989,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.4/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4706,12 +5035,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.3/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4749,12 +5081,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.3/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4792,12 +5127,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4835,12 +5173,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4878,12 +5219,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4921,12 +5265,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/4.0.6/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4964,12 +5311,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/4.0.6/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5007,12 +5357,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.4.10/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5050,12 +5403,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.4.10/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5093,12 +5449,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.3.12/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5136,12 +5495,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.3.12/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5179,12 +5541,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2.11/normal];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5222,12 +5587,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2.11/jemalloc];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5265,12 +5633,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2.11/malloctrim];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5438,6 +5809,8 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} ### Check whether dependent jobs failed ### @@ -5449,840 +5822,840 @@ jobs: - name: Check whether 'Test [centos-8/4.0/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-4_0-normal.result != 'success' && (needs.test_centos_8-4_0-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/4.0/normal];')) - name: Check whether 'Test [centos-8/4.0/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-4_0-jemalloc.result != 'success' && (needs.test_centos_8-4_0-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/4.0/jemalloc];')) - name: Check whether 'Test [centos-8/3.4/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_4-normal.result != 'success' && (needs.test_centos_8-3_4-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.4/normal];')) - name: Check whether 'Test [centos-8/3.4/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_4-jemalloc.result != 'success' && (needs.test_centos_8-3_4-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.4/jemalloc];')) - name: Check whether 'Test [centos-8/3.3/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_3-normal.result != 'success' && (needs.test_centos_8-3_3-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.3/normal];')) - name: Check whether 'Test [centos-8/3.3/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_3-jemalloc.result != 'success' && (needs.test_centos_8-3_3-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.3/jemalloc];')) - name: Check whether 'Test [centos-8/3.2/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_2-normal.result != 'success' && (needs.test_centos_8-3_2-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2/normal];')) - name: Check whether 'Test [centos-8/3.2/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_2-jemalloc.result != 'success' && (needs.test_centos_8-3_2-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2/jemalloc];')) - name: Check whether 'Test [centos-8/3.2/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_2-malloctrim.result != 'success' && (needs.test_centos_8-3_2-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2/malloctrim];')) - name: Check whether 'Test [centos-8/4.0.6/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-4_0_6-normal.result != 'success' && (needs.test_centos_8-4_0_6-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/4.0.6/normal];')) - name: Check whether 'Test [centos-8/4.0.6/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-4_0_6-jemalloc.result != 'success' && (needs.test_centos_8-4_0_6-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/4.0.6/jemalloc];')) - name: Check whether 'Test [centos-8/3.4.10/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_4_10-normal.result != 'success' && (needs.test_centos_8-3_4_10-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.4.10/normal];')) - name: Check whether 'Test [centos-8/3.4.10/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_4_10-jemalloc.result != 'success' && (needs.test_centos_8-3_4_10-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.4.10/jemalloc];')) - name: Check whether 'Test [centos-8/3.3.12/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_3_12-normal.result != 'success' && (needs.test_centos_8-3_3_12-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.3.12/normal];')) - name: Check whether 'Test [centos-8/3.3.12/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_3_12-jemalloc.result != 'success' && (needs.test_centos_8-3_3_12-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.3.12/jemalloc];')) - name: Check whether 'Test [centos-8/3.2.11/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_2_11-normal.result != 'success' && (needs.test_centos_8-3_2_11-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2.11/normal];')) - name: Check whether 'Test [centos-8/3.2.11/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_2_11-jemalloc.result != 'success' && (needs.test_centos_8-3_2_11-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2.11/jemalloc];')) - name: Check whether 'Test [centos-8/3.2.11/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_centos_8-3_2_11-malloctrim.result != 'success' && (needs.test_centos_8-3_2_11-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [centos-8/3.2.11/malloctrim];')) - name: Check whether 'Test [debian-11/4.0/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-4_0-normal.result != 'success' && (needs.test_debian_11-4_0-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/4.0/normal];')) - name: Check whether 'Test [debian-11/4.0/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-4_0-jemalloc.result != 'success' && (needs.test_debian_11-4_0-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/4.0/jemalloc];')) - name: Check whether 'Test [debian-11/3.4/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_4-normal.result != 'success' && (needs.test_debian_11-3_4-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.4/normal];')) - name: Check whether 'Test [debian-11/3.4/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_4-jemalloc.result != 'success' && (needs.test_debian_11-3_4-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.4/jemalloc];')) - name: Check whether 'Test [debian-11/3.3/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_3-normal.result != 'success' && (needs.test_debian_11-3_3-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.3/normal];')) - name: Check whether 'Test [debian-11/3.3/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_3-jemalloc.result != 'success' && (needs.test_debian_11-3_3-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.3/jemalloc];')) - name: Check whether 'Test [debian-11/3.2/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_2-normal.result != 'success' && (needs.test_debian_11-3_2-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2/normal];')) - name: Check whether 'Test [debian-11/3.2/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_2-jemalloc.result != 'success' && (needs.test_debian_11-3_2-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2/jemalloc];')) - name: Check whether 'Test [debian-11/3.2/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_2-malloctrim.result != 'success' && (needs.test_debian_11-3_2-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2/malloctrim];')) - name: Check whether 'Test [debian-11/4.0.6/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-4_0_6-normal.result != 'success' && (needs.test_debian_11-4_0_6-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/4.0.6/normal];')) - name: Check whether 'Test [debian-11/4.0.6/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-4_0_6-jemalloc.result != 'success' && (needs.test_debian_11-4_0_6-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/4.0.6/jemalloc];')) - name: Check whether 'Test [debian-11/3.4.10/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_4_10-normal.result != 'success' && (needs.test_debian_11-3_4_10-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.4.10/normal];')) - name: Check whether 'Test [debian-11/3.4.10/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_4_10-jemalloc.result != 'success' && (needs.test_debian_11-3_4_10-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.4.10/jemalloc];')) - name: Check whether 'Test [debian-11/3.3.12/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_3_12-normal.result != 'success' && (needs.test_debian_11-3_3_12-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.3.12/normal];')) - name: Check whether 'Test [debian-11/3.3.12/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_3_12-jemalloc.result != 'success' && (needs.test_debian_11-3_3_12-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.3.12/jemalloc];')) - name: Check whether 'Test [debian-11/3.2.11/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_2_11-normal.result != 'success' && (needs.test_debian_11-3_2_11-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2.11/normal];')) - name: Check whether 'Test [debian-11/3.2.11/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_2_11-jemalloc.result != 'success' && (needs.test_debian_11-3_2_11-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2.11/jemalloc];')) - name: Check whether 'Test [debian-11/3.2.11/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_11-3_2_11-malloctrim.result != 'success' && (needs.test_debian_11-3_2_11-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-11/3.2.11/malloctrim];')) - name: Check whether 'Test [debian-12/4.0/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-4_0-normal.result != 'success' && (needs.test_debian_12-4_0-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/4.0/normal];')) - name: Check whether 'Test [debian-12/4.0/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-4_0-jemalloc.result != 'success' && (needs.test_debian_12-4_0-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/4.0/jemalloc];')) - name: Check whether 'Test [debian-12/3.4/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_4-normal.result != 'success' && (needs.test_debian_12-3_4-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.4/normal];')) - name: Check whether 'Test [debian-12/3.4/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_4-jemalloc.result != 'success' && (needs.test_debian_12-3_4-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.4/jemalloc];')) - name: Check whether 'Test [debian-12/3.3/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_3-normal.result != 'success' && (needs.test_debian_12-3_3-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.3/normal];')) - name: Check whether 'Test [debian-12/3.3/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_3-jemalloc.result != 'success' && (needs.test_debian_12-3_3-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.3/jemalloc];')) - name: Check whether 'Test [debian-12/3.2/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_2-normal.result != 'success' && (needs.test_debian_12-3_2-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2/normal];')) - name: Check whether 'Test [debian-12/3.2/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_2-jemalloc.result != 'success' && (needs.test_debian_12-3_2-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2/jemalloc];')) - name: Check whether 'Test [debian-12/3.2/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_2-malloctrim.result != 'success' && (needs.test_debian_12-3_2-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2/malloctrim];')) - name: Check whether 'Test [debian-12/4.0.6/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-4_0_6-normal.result != 'success' && (needs.test_debian_12-4_0_6-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/4.0.6/normal];')) - name: Check whether 'Test [debian-12/4.0.6/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-4_0_6-jemalloc.result != 'success' && (needs.test_debian_12-4_0_6-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/4.0.6/jemalloc];')) - name: Check whether 'Test [debian-12/3.4.10/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_4_10-normal.result != 'success' && (needs.test_debian_12-3_4_10-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.4.10/normal];')) - name: Check whether 'Test [debian-12/3.4.10/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_4_10-jemalloc.result != 'success' && (needs.test_debian_12-3_4_10-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.4.10/jemalloc];')) - name: Check whether 'Test [debian-12/3.3.12/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_3_12-normal.result != 'success' && (needs.test_debian_12-3_3_12-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.3.12/normal];')) - name: Check whether 'Test [debian-12/3.3.12/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_3_12-jemalloc.result != 'success' && (needs.test_debian_12-3_3_12-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.3.12/jemalloc];')) - name: Check whether 'Test [debian-12/3.2.11/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_2_11-normal.result != 'success' && (needs.test_debian_12-3_2_11-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2.11/normal];')) - name: Check whether 'Test [debian-12/3.2.11/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_2_11-jemalloc.result != 'success' && (needs.test_debian_12-3_2_11-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2.11/jemalloc];')) - name: Check whether 'Test [debian-12/3.2.11/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_12-3_2_11-malloctrim.result != 'success' && (needs.test_debian_12-3_2_11-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-12/3.2.11/malloctrim];')) - name: Check whether 'Test [debian-13/4.0/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-4_0-normal.result != 'success' && (needs.test_debian_13-4_0-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/4.0/normal];')) - name: Check whether 'Test [debian-13/4.0/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-4_0-jemalloc.result != 'success' && (needs.test_debian_13-4_0-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/4.0/jemalloc];')) - name: Check whether 'Test [debian-13/3.4/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-3_4-normal.result != 'success' && (needs.test_debian_13-3_4-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.4/normal];')) - name: Check whether 'Test [debian-13/3.4/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-3_4-jemalloc.result != 'success' && (needs.test_debian_13-3_4-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.4/jemalloc];')) - name: Check whether 'Test [debian-13/3.3/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-3_3-normal.result != 'success' && (needs.test_debian_13-3_3-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.3/normal];')) - name: Check whether 'Test [debian-13/3.3/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-3_3-jemalloc.result != 'success' && (needs.test_debian_13-3_3-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.3/jemalloc];')) - name: Check whether 'Test [debian-13/4.0.6/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-4_0_6-normal.result != 'success' && (needs.test_debian_13-4_0_6-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/4.0.6/normal];')) - name: Check whether 'Test [debian-13/4.0.6/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-4_0_6-jemalloc.result != 'success' && (needs.test_debian_13-4_0_6-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/4.0.6/jemalloc];')) - name: Check whether 'Test [debian-13/3.4.10/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-3_4_10-normal.result != 'success' && (needs.test_debian_13-3_4_10-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.4.10/normal];')) - name: Check whether 'Test [debian-13/3.4.10/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-3_4_10-jemalloc.result != 'success' && (needs.test_debian_13-3_4_10-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.4.10/jemalloc];')) - name: Check whether 'Test [debian-13/3.3.12/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-3_3_12-normal.result != 'success' && (needs.test_debian_13-3_3_12-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.3.12/normal];')) - name: Check whether 'Test [debian-13/3.3.12/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_debian_13-3_3_12-jemalloc.result != 'success' && (needs.test_debian_13-3_3_12-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [debian-13/3.3.12/jemalloc];')) - name: Check whether 'Test [el-9/4.0/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-4_0-normal.result != 'success' && (needs.test_el_9-4_0-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/4.0/normal];')) - name: Check whether 'Test [el-9/4.0/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-4_0-jemalloc.result != 'success' && (needs.test_el_9-4_0-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/4.0/jemalloc];')) - name: Check whether 'Test [el-9/3.4/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_4-normal.result != 'success' && (needs.test_el_9-3_4-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.4/normal];')) - name: Check whether 'Test [el-9/3.4/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_4-jemalloc.result != 'success' && (needs.test_el_9-3_4-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.4/jemalloc];')) - name: Check whether 'Test [el-9/3.3/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_3-normal.result != 'success' && (needs.test_el_9-3_3-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.3/normal];')) - name: Check whether 'Test [el-9/3.3/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_3-jemalloc.result != 'success' && (needs.test_el_9-3_3-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.3/jemalloc];')) - name: Check whether 'Test [el-9/3.2/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_2-normal.result != 'success' && (needs.test_el_9-3_2-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2/normal];')) - name: Check whether 'Test [el-9/3.2/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_2-jemalloc.result != 'success' && (needs.test_el_9-3_2-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2/jemalloc];')) - name: Check whether 'Test [el-9/3.2/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_2-malloctrim.result != 'success' && (needs.test_el_9-3_2-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2/malloctrim];')) - name: Check whether 'Test [el-9/4.0.6/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-4_0_6-normal.result != 'success' && (needs.test_el_9-4_0_6-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/4.0.6/normal];')) - name: Check whether 'Test [el-9/4.0.6/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-4_0_6-jemalloc.result != 'success' && (needs.test_el_9-4_0_6-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/4.0.6/jemalloc];')) - name: Check whether 'Test [el-9/3.4.10/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_4_10-normal.result != 'success' && (needs.test_el_9-3_4_10-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.4.10/normal];')) - name: Check whether 'Test [el-9/3.4.10/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_4_10-jemalloc.result != 'success' && (needs.test_el_9-3_4_10-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.4.10/jemalloc];')) - name: Check whether 'Test [el-9/3.3.12/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_3_12-normal.result != 'success' && (needs.test_el_9-3_3_12-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.3.12/normal];')) - name: Check whether 'Test [el-9/3.3.12/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_3_12-jemalloc.result != 'success' && (needs.test_el_9-3_3_12-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.3.12/jemalloc];')) - name: Check whether 'Test [el-9/3.2.11/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_2_11-normal.result != 'success' && (needs.test_el_9-3_2_11-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2.11/normal];')) - name: Check whether 'Test [el-9/3.2.11/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_2_11-jemalloc.result != 'success' && (needs.test_el_9-3_2_11-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2.11/jemalloc];')) - name: Check whether 'Test [el-9/3.2.11/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_el_9-3_2_11-malloctrim.result != 'success' && (needs.test_el_9-3_2_11-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [el-9/3.2.11/malloctrim];')) - name: Check whether 'Test [ubuntu-22.04/4.0/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-4_0-normal.result != 'success' && (needs.test_ubuntu_22_04-4_0-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/4.0/normal];')) - name: Check whether 'Test [ubuntu-22.04/4.0/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-4_0-jemalloc.result != 'success' && (needs.test_ubuntu_22_04-4_0-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/4.0/jemalloc];')) - name: Check whether 'Test [ubuntu-22.04/3.4/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_4-normal.result != 'success' && (needs.test_ubuntu_22_04-3_4-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.4/normal];')) - name: Check whether 'Test [ubuntu-22.04/3.4/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_4-jemalloc.result != 'success' && (needs.test_ubuntu_22_04-3_4-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.4/jemalloc];')) - name: Check whether 'Test [ubuntu-22.04/3.3/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_3-normal.result != 'success' && (needs.test_ubuntu_22_04-3_3-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.3/normal];')) - name: Check whether 'Test [ubuntu-22.04/3.3/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_3-jemalloc.result != 'success' && (needs.test_ubuntu_22_04-3_3-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.3/jemalloc];')) - name: Check whether 'Test [ubuntu-22.04/3.2/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_2-normal.result != 'success' && (needs.test_ubuntu_22_04-3_2-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2/normal];')) - name: Check whether 'Test [ubuntu-22.04/3.2/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_2-jemalloc.result != 'success' && (needs.test_ubuntu_22_04-3_2-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2/jemalloc];')) - name: Check whether 'Test [ubuntu-22.04/3.2/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_2-malloctrim.result != 'success' && (needs.test_ubuntu_22_04-3_2-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2/malloctrim];')) - name: Check whether 'Test [ubuntu-22.04/4.0.6/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-4_0_6-normal.result != 'success' && (needs.test_ubuntu_22_04-4_0_6-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/4.0.6/normal];')) - name: Check whether 'Test [ubuntu-22.04/4.0.6/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-4_0_6-jemalloc.result != 'success' && (needs.test_ubuntu_22_04-4_0_6-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/4.0.6/jemalloc];')) - name: Check whether 'Test [ubuntu-22.04/3.4.10/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_4_10-normal.result != 'success' && (needs.test_ubuntu_22_04-3_4_10-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.4.10/normal];')) - name: Check whether 'Test [ubuntu-22.04/3.4.10/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_4_10-jemalloc.result != 'success' && (needs.test_ubuntu_22_04-3_4_10-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.4.10/jemalloc];')) - name: Check whether 'Test [ubuntu-22.04/3.3.12/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_3_12-normal.result != 'success' && (needs.test_ubuntu_22_04-3_3_12-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.3.12/normal];')) - name: Check whether 'Test [ubuntu-22.04/3.3.12/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_3_12-jemalloc.result != 'success' && (needs.test_ubuntu_22_04-3_3_12-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.3.12/jemalloc];')) - name: Check whether 'Test [ubuntu-22.04/3.2.11/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_2_11-normal.result != 'success' && (needs.test_ubuntu_22_04-3_2_11-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2.11/normal];')) - name: Check whether 'Test [ubuntu-22.04/3.2.11/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_2_11-jemalloc.result != 'success' && (needs.test_ubuntu_22_04-3_2_11-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2.11/jemalloc];')) - name: Check whether 'Test [ubuntu-22.04/3.2.11/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_22_04-3_2_11-malloctrim.result != 'success' && (needs.test_ubuntu_22_04-3_2_11-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-22.04/3.2.11/malloctrim];')) - name: Check whether 'Test [ubuntu-24.04/4.0/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-4_0-normal.result != 'success' && (needs.test_ubuntu_24_04-4_0-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/4.0/normal];')) - name: Check whether 'Test [ubuntu-24.04/4.0/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-4_0-jemalloc.result != 'success' && (needs.test_ubuntu_24_04-4_0-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/4.0/jemalloc];')) - name: Check whether 'Test [ubuntu-24.04/3.4/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_4-normal.result != 'success' && (needs.test_ubuntu_24_04-3_4-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.4/normal];')) - name: Check whether 'Test [ubuntu-24.04/3.4/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_4-jemalloc.result != 'success' && (needs.test_ubuntu_24_04-3_4-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.4/jemalloc];')) - name: Check whether 'Test [ubuntu-24.04/3.3/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_3-normal.result != 'success' && (needs.test_ubuntu_24_04-3_3-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.3/normal];')) - name: Check whether 'Test [ubuntu-24.04/3.3/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_3-jemalloc.result != 'success' && (needs.test_ubuntu_24_04-3_3-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.3/jemalloc];')) - name: Check whether 'Test [ubuntu-24.04/3.2/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_2-normal.result != 'success' && (needs.test_ubuntu_24_04-3_2-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2/normal];')) - name: Check whether 'Test [ubuntu-24.04/3.2/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_2-jemalloc.result != 'success' && (needs.test_ubuntu_24_04-3_2-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2/jemalloc];')) - name: Check whether 'Test [ubuntu-24.04/3.2/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_2-malloctrim.result != 'success' && (needs.test_ubuntu_24_04-3_2-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2/malloctrim];')) - name: Check whether 'Test [ubuntu-24.04/4.0.6/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-4_0_6-normal.result != 'success' && (needs.test_ubuntu_24_04-4_0_6-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/4.0.6/normal];')) - name: Check whether 'Test [ubuntu-24.04/4.0.6/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-4_0_6-jemalloc.result != 'success' && (needs.test_ubuntu_24_04-4_0_6-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/4.0.6/jemalloc];')) - name: Check whether 'Test [ubuntu-24.04/3.4.10/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_4_10-normal.result != 'success' && (needs.test_ubuntu_24_04-3_4_10-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.4.10/normal];')) - name: Check whether 'Test [ubuntu-24.04/3.4.10/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_4_10-jemalloc.result != 'success' && (needs.test_ubuntu_24_04-3_4_10-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.4.10/jemalloc];')) - name: Check whether 'Test [ubuntu-24.04/3.3.12/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_3_12-normal.result != 'success' && (needs.test_ubuntu_24_04-3_3_12-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.3.12/normal];')) - name: Check whether 'Test [ubuntu-24.04/3.3.12/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_3_12-jemalloc.result != 'success' && (needs.test_ubuntu_24_04-3_3_12-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.3.12/jemalloc];')) - name: Check whether 'Test [ubuntu-24.04/3.2.11/normal]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_2_11-normal.result != 'success' && (needs.test_ubuntu_24_04-3_2_11-normal.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2.11/normal];')) - name: Check whether 'Test [ubuntu-24.04/3.2.11/jemalloc]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_2_11-jemalloc.result != 'success' && (needs.test_ubuntu_24_04-3_2_11-jemalloc.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2.11/jemalloc];')) - name: Check whether 'Test [ubuntu-24.04/3.2.11/malloctrim]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_ubuntu_24_04-3_2_11-malloctrim.result != 'success' && (needs.test_ubuntu_24_04-3_2_11-malloctrim.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [ubuntu-24.04/3.2.11/malloctrim];')) @@ -6302,5 +6675,5 @@ jobs: run: git tag epic-${{ env.NEXT_RELEASE_VERSION }} - name: Push Git tag - if: github.ref == 'refs/heads/main' + if: inputs.release run: git push origin epic-${{ env.NEXT_RELEASE_VERSION }} diff --git a/.github/workflows/ci-cd-publish-test-production.yml.erb b/.github/workflows/ci-cd-publish-test-production.yml.erb index c763ba5..e40759a 100644 --- a/.github/workflows/ci-cd-publish-test-production.yml.erb +++ b/.github/workflows/ci-cd-publish-test-production.yml.erb @@ -5,12 +5,21 @@ name: 'CI/CD: publish & test against production repos' on: workflow_call: inputs: + git_commit: + type: string + required: false + allow_unsafe_pr_checkout: + type: boolean + required: false ci_artifacts_run_number: - required: true type: string - necessary_jobs: required: true + necessary_jobs: type: string + required: true + release: + type: boolean + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number || github.run_number }} @@ -30,6 +39,8 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - name: Clean disk space run: ./internal-scripts/ci-cd/publish/clean-disk-space.sh - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 @@ -88,7 +99,7 @@ jobs: CI_ARTIFACTS_BUCKET_NAME: ${{ vars.CI_ARTIFACTS_BUCKET }} TESTING: false OVERWRITE_EXISTING: false - DRY_RUN: ${{ github.ref != 'refs/heads/main' }} + DRY_RUN: ${{ !inputs.release }} CLEANUP: true - name: Upload RPMs to repo @@ -98,11 +109,11 @@ jobs: CI_ARTIFACTS_BUCKET_NAME: ${{ vars.CI_ARTIFACTS_BUCKET }} TESTING: false OVERWRITE_EXISTING: false - DRY_RUN: ${{ github.ref != 'refs/heads/main' }} + DRY_RUN: ${{ !inputs.release }} - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 id: get-id-token - if: github.ref == 'refs/heads/main' + if: inputs.release with: script: | const fs = require('fs'); @@ -115,7 +126,7 @@ jobs: - name: Restart web server run: ./internal-scripts/ci-cd/publish/restart-web-server.rb - if: github.ref == 'refs/heads/main' + if: inputs.release env: ID_TOKEN: ${{ steps.get-id-token.outputs.id_token }} @@ -134,12 +145,15 @@ jobs: environment: test timeout-minutes: 30 if: | - github.ref == 'refs/heads/main' + inputs.release && contains(inputs.necessary_jobs, ';Test against production repo [<%= distribution[:name] %>/<%= ruby_package_version[:id] %>/<%= variant[:name] %>];') permissions: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -198,6 +212,8 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} ### Check whether dependent jobs failed ### @@ -212,7 +228,7 @@ jobs: - name: Check whether 'Test [<%= distribution[:name] %>/<%= ruby_package_version[:id] %>/<%= variant[:name] %>]' did not fail run: 'false' if: | - github.ref == 'refs/heads/main' + inputs.release && needs.test_<%= slug(distribution[:name]) %>-<%= slug(ruby_package_version[:id]) %>-<%= slug(variant[:name]) %>.result != 'success' && (needs.test_<%= slug(distribution[:name]) %>-<%= slug(ruby_package_version[:id]) %>-<%= slug(variant[:name]) %>.result != 'skipped' || contains(inputs.necessary_jobs, ';Test against production repo [<%= distribution[:name] %>/<%= ruby_package_version[:id] %>/<%= variant[:name] %>];')) @@ -235,5 +251,5 @@ jobs: run: git tag epic-${{ env.NEXT_RELEASE_VERSION }} - name: Push Git tag - if: github.ref == 'refs/heads/main' + if: inputs.release run: git push origin epic-${{ env.NEXT_RELEASE_VERSION }} diff --git a/.github/workflows/ci-cd-publish-test-test.yml b/.github/workflows/ci-cd-publish-test-test.yml index 80769ca..a87c04f 100644 --- a/.github/workflows/ci-cd-publish-test-test.yml +++ b/.github/workflows/ci-cd-publish-test-test.yml @@ -15,12 +15,18 @@ name: 'CI/CD: publish & test against test repos' on: workflow_call: inputs: + git_commit: + type: string + required: false + allow_unsafe_pr_checkout: + type: boolean + required: false ci_artifacts_run_number: - required: true type: string - necessary_jobs: required: true + necessary_jobs: type: string + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number || github.run_number }} @@ -40,6 +46,8 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - name: Clean disk space run: ./internal-scripts/ci-cd/publish/clean-disk-space.sh - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 @@ -125,6 +133,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -167,6 +178,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -209,6 +223,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -251,6 +268,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -293,6 +313,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -335,6 +358,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -377,6 +403,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -419,6 +448,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -461,6 +493,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -503,6 +538,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -545,6 +583,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -587,6 +628,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -629,6 +673,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -671,6 +718,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -713,6 +763,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -755,6 +808,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -797,6 +853,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -839,6 +898,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -882,6 +944,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -924,6 +989,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -966,6 +1034,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1008,6 +1079,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1050,6 +1124,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1092,6 +1169,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1134,6 +1214,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1176,6 +1259,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1218,6 +1304,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1260,6 +1349,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1302,6 +1394,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1344,6 +1439,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1386,6 +1484,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1428,6 +1529,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1470,6 +1574,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1512,6 +1619,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1554,6 +1664,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1596,6 +1709,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1639,6 +1755,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1681,6 +1800,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1723,6 +1845,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1765,6 +1890,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1807,6 +1935,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1849,6 +1980,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1891,6 +2025,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1933,6 +2070,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -1975,6 +2115,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2017,6 +2160,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2059,6 +2205,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2101,6 +2250,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2143,6 +2295,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2185,6 +2340,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2227,6 +2385,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2269,6 +2430,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2311,6 +2475,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2353,6 +2520,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2396,6 +2566,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2438,6 +2611,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2480,6 +2656,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2522,6 +2701,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2564,6 +2746,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2606,6 +2791,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2648,6 +2836,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2690,6 +2881,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2732,6 +2926,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2774,6 +2971,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2816,6 +3016,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2858,6 +3061,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2901,6 +3107,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2943,6 +3152,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -2985,6 +3197,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3027,6 +3242,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3069,6 +3287,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3111,6 +3332,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3153,6 +3377,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3195,6 +3422,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3237,6 +3467,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3279,6 +3512,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3321,6 +3557,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3363,6 +3602,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3405,6 +3647,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3447,6 +3692,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3489,6 +3737,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3531,6 +3782,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3573,6 +3827,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3615,6 +3872,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3658,6 +3918,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3700,6 +3963,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3742,6 +4008,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3784,6 +4053,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3826,6 +4098,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3868,6 +4143,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3910,6 +4188,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3952,6 +4233,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -3994,6 +4278,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4036,6 +4323,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4078,6 +4368,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4120,6 +4413,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4162,6 +4458,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4204,6 +4503,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4246,6 +4548,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4288,6 +4593,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4330,6 +4638,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4372,6 +4683,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4415,6 +4729,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4457,6 +4774,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4499,6 +4819,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4541,6 +4864,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4583,6 +4909,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4625,6 +4954,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4667,6 +4999,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4709,6 +5044,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4751,6 +5089,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4793,6 +5134,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4835,6 +5179,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4877,6 +5224,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4919,6 +5269,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -4961,6 +5314,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5003,6 +5359,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5045,6 +5404,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5087,6 +5449,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5129,6 +5494,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -5294,6 +5662,9 @@ jobs: if: 'always()' steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} ### Check whether dependent jobs failed ### diff --git a/.github/workflows/ci-cd-publish-test-test.yml.erb b/.github/workflows/ci-cd-publish-test-test.yml.erb index 5b7268f..f9dcfcf 100644 --- a/.github/workflows/ci-cd-publish-test-test.yml.erb +++ b/.github/workflows/ci-cd-publish-test-test.yml.erb @@ -5,12 +5,18 @@ name: 'CI/CD: publish & test against test repos' on: workflow_call: inputs: + git_commit: + type: string + required: false + allow_unsafe_pr_checkout: + type: boolean + required: false ci_artifacts_run_number: - required: true type: string - necessary_jobs: required: true + necessary_jobs: type: string + required: true env: CI_ARTIFACTS_RUN_NUMBER: ${{ inputs.ci_artifacts_run_number || github.run_number }} @@ -30,6 +36,8 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - name: Clean disk space run: ./internal-scripts/ci-cd/publish/clean-disk-space.sh - uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1 @@ -117,6 +125,9 @@ jobs: id-token: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3 with: project_id: ${{ vars.GCLOUD_PROJECT_ID }} @@ -172,6 +183,9 @@ jobs: if: 'always()' steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + ref: ${{ inputs.git_commit }} + allow-unsafe-pr-checkout: ${{ inputs.allow_unsafe_pr_checkout }} ### Check whether dependent jobs failed ### diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 0a11344..88ec786 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -26,6 +26,27 @@ Have a look at our [issue tracker](https://github.com/fullstaq-ruby/server-editi To learn how the Fullstaq Ruby Server Edition codebase works and how to develop it, please read our [development handbook](dev-handbook/README.md). +## Testing your changes + +### Automated CI on forks + +When you push to your fork or open a pull request, a contributor CI workflow runs automatically. It: + + * Validates CI/CD workflow YAML is up-to-date. + * Builds Ruby packages for two representative distributions (Ubuntu 24.04 and Enterprise Linux 9) with all three variants (normal, jemalloc, malloctrim). + * Runs smoke tests that install the packages and verify Ruby works correctly. + +No cloud credentials or special setup are needed — the workflow uses only Docker and GitHub Actions. + +If a maintainer wants to run the full CI pipeline against your PR (which tests all distributions and publishes to test repositories), they will add the `ok-to-test` label. This label is automatically removed when you push new commits, so the maintainer must re-review and re-label after each update. + +### Local builds and testing + +For faster iteration, you can build and test packages on your own machine. You only need Docker and Ruby >= 3.2: + + * **Building packages:** see [Building packages locally](dev-handbook/building-packages-locally.md) + * **Testing packages:** see [Testing packages locally](dev-handbook/testing-packages-locally.md) + ## Stuck? Need help? Please post something on our [discussion forum](https://github.com/fullstaq-ruby/server-edition/discussions). diff --git a/config.yml b/config.yml index 7bf5a4b..ae9175e 100644 --- a/config.yml +++ b/config.yml @@ -105,6 +105,13 @@ variant_exclusions: ## `package_revision` numbers too! jemalloc_version: '3.6.0' +## (Optional) +## Which distributions to include in the contributor CI workflow. +## This is a small subset used for fast feedback on forks. +contributor_distributions: + - ubuntu-24.04 + - el-9 + ## (Required) ## Specify which distributions to build packages for. ## When set to 'all', will build for all supported distributions. diff --git a/container-entrypoints/test-rpms-prepare b/container-entrypoints/test-rpms-prepare index 7b32b12..be92890 100755 --- a/container-entrypoints/test-rpms-prepare +++ b/container-entrypoints/test-rpms-prepare @@ -14,4 +14,4 @@ require_container_mount "$OUTPUT_PATH" run cp /input/* /output/ -run createrepo /output +run createrepo_c /output diff --git a/dev-handbook/building-packages-locally.md b/dev-handbook/building-packages-locally.md index 62c12b3..8ef60a9 100644 --- a/dev-handbook/building-packages-locally.md +++ b/dev-handbook/building-packages-locally.md @@ -1,5 +1,7 @@ # Building packages locally +> **Tip:** If you just want to validate that your changes compile and pass tests, the contributor CI workflow does this automatically when you push to your fork. See [CONTRIBUTING.md](../CONTRIBUTING.md#testing-your-changes) for details. The instructions below are for local builds when you want faster iteration or need to debug packaging issues. + This tutorial shows how you can build packages on your own computer. Because we follow [the "minimal dependencies" principle](minimal-dependencies-principle.md), you can build packages for any distribution, regardless of which OS or distribution you're running on. diff --git a/internal-scripts/generate-ci-cd-yaml.rb b/internal-scripts/generate-ci-cd-yaml.rb index db4f87c..e8ef5a0 100755 --- a/internal-scripts/generate-ci-cd-yaml.rb +++ b/internal-scripts/generate-ci-cd-yaml.rb @@ -35,6 +35,7 @@ def main end generate_yaml_file_from_template(template_name: 'ci-cd-publish-test-test') generate_yaml_file_from_template(template_name: 'ci-cd-publish-test-production') + generate_yaml_file_from_template(template_name: 'ci-cd-contributor') end private diff --git a/internal-scripts/test-debs b/internal-scripts/test-debs index 3e07aa4..edbf41d 100755 --- a/internal-scripts/test-debs +++ b/internal-scripts/test-debs @@ -9,7 +9,7 @@ source "$SELFDIR/../lib/library.sh" header "Installing packages" -ESSENTIAL_PACKAGES=(perl sudo binutils) +ESSENTIAL_PACKAGES=(perl sudo binutils adduser) if [[ "$SERVER" = "" ]]; then echo "+ Create /etc/apt/sources.list.d/local.list" diff --git a/lib/ci_workflow_support.rb b/lib/ci_workflow_support.rb index 5255440..7140773 100644 --- a/lib/ci_workflow_support.rb +++ b/lib/ci_workflow_support.rb @@ -66,13 +66,21 @@ def distributions abort "Config error: 'distributions' must be set to 'all' or to a list" end - names.map do |name| - { - name: name, - package_format: autodetect_package_format(name), - test_image: determine_test_image_for(name), - } - end + build_distribution_entries(names) + end + end + + def contributor_distributions + @contributor_distributions ||= build_distribution_entries(config[:contributor_distributions] || []) + end + + def build_distribution_entries(names) + names.map do |name| + { + name: name, + package_format: autodetect_package_format(name), + test_image: determine_test_image_for(name), + } end end @@ -261,6 +269,10 @@ def ruby_package_versions end end + def latest_ruby_package_version + ruby_package_versions.max_by { |entry| Gem::Version.new(entry[:full_version]) } + end + def ruby_package_versions_for_distro(distro) result = ruby_package_versions.find_all do |ruby_package_version| !ruby_package_version_excluded_from_distro?(ruby_package_version, distro)