diff options
author | Tomas Mraz <tomas@openssl.org> | 2021-05-19 09:50:17 +0200 |
---|---|---|
committer | Tomas Mraz <tomas@openssl.org> | 2021-05-21 09:43:04 +0200 |
commit | 9ad400f788fd4f1e36f0814c1952e2c4cbc3b970 (patch) | |
tree | 84b4cce1596908c077e6dce78b00116f37904a18 /.github/workflows/fips-label.yml | |
parent | cc9f9b98997ce3aca276dc6dbbe6d98efab4e65d (diff) |
FIPS label CI: Save PR number and use it
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15345)
Diffstat (limited to '.github/workflows/fips-label.yml')
-rw-r--r-- | .github/workflows/fips-label.yml | 40 |
1 files changed, 30 insertions, 10 deletions
diff --git a/.github/workflows/fips-label.yml b/.github/workflows/fips-label.yml index a46f213f1c..eb87f200f5 100644 --- a/.github/workflows/fips-label.yml +++ b/.github/workflows/fips-label.yml @@ -10,27 +10,47 @@ jobs: runs-on: ubuntu-latest if: ${{ github.event.workflow_run.event == 'pull_request' }} steps: - - name: 'Check artifact and apply' + - name: 'Download artifact' if: ${{ github.event.workflow_run.conclusion == 'success' }} uses: actions/github-script@v4 with: - github-token: ${{secrets.GITHUB_TOKEN}} script: | var artifacts = await github.actions.listWorkflowRunArtifacts({ - owner: context.repo.owner, - repo: context.repo.repo, - run_id: ${{ github.event.workflow_run.id }} + owner: context.repo.owner, + repo: context.repo.repo, + run_id: ${{github.event.workflow_run.id }}, + }); + var matchArtifact = artifacts.data.artifacts.filter((artifact) => { + return artifact.name == "fips_checksum" + })[0]; + var download = await github.actions.downloadArtifact({ + owner: context.repo.owner, + repo: context.repo.repo, + artifact_id: matchArtifact.id, + archive_format: 'zip', }); - if ( artifacts.data.artifacts[0].name == 'fips_changed' ) { + var fs = require('fs'); + fs.writeFileSync('${{github.workspace}}/artifact.zip', Buffer.from(download.data)); + - run: unzip artifact.zip + if: ${{ github.event.workflow_run.conclusion == 'success' }} + - name: 'Check artifact and apply' + if: ${{ github.event.workflow_run.conclusion == 'success' }} + uses: actions/github-script@v4 + with: + github-token: ${{secrets.GITHUB_TOKEN}} + script: | + var fs = require('fs'); + var pr_num = Number(fs.readFileSync('./pr_num')); + if ( fs.existsSync('./fips_changed') ) { github.issues.addLabels({ - issue_number: ${{ github.event.workflow_run.pull_requests[0].number }}, + issue_number: pr_num, owner: context.repo.owner, repo: context.repo.repo, labels: ['severity: fips change'] }); - } else if ( artifacts.data.artifacts[0].name == 'fips_unchanged' ) { + } else if ( fs.existsSync('./fips_unchanged') ) { var labels = await github.issues.listLabelsOnIssue({ - issue_number: ${{ github.event.workflow_run.pull_requests[0].number }}, + issue_number: pr_num, owner: context.repo.owner, repo: context.repo.repo }); @@ -38,7 +58,7 @@ jobs: for ( var label in labels.data ) { if (labels.data[label].name == 'severity: fips change') { github.issues.removeLabel({ - issue_number: ${{ github.event.workflow_run.pull_requests[0].number }}, + issue_number: pr_num, owner: context.repo.owner, repo: context.repo.repo, name: 'severity: fips change' |