mparticle-apple-sdk/.github/workflows/pull-request.yml at main · mParticle/mparticle-apple-sdk · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
name: Pull request

on:
  workflow_dispatch:
  push:
    branches:
      - main
      - release*
      - workstation*
  pull_request:

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

# Local reusable workflows resolve from the triggering ref without a runner
# checkout. Actionlint 1.7.7 does not accept GitHub's newer $/ syntax.
jobs:
  rokt-safe-pr-gate-tests:
    name: Rokt Safe PR gate tests
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - name: Test gate policy
        run: node --test .github/actions/rokt-safe-pr-gate/test/gate.test.js

  build-and-lint:
    uses: ./.github/workflows/build-and-lint.yml # zizmor: ignore[self-repository]
    permissions:
      contents: read
      checks: write
      id-token: write

  native-tests:
    uses: ./.github/workflows/native-tests.yml # zizmor: ignore[self-repository]

  build-secondary-platforms:
    uses: ./.github/workflows/build-secondary-platforms.yml # zizmor: ignore[self-repository]

  integration-tests:
    uses: ./.github/workflows/integration-tests.yml # zizmor: ignore[self-repository]

  size-report:
    uses: ./.github/workflows/size-report.yml # zizmor: ignore[self-repository]
    permissions:
      contents: read
      pull-requests: write

  swift-migration-progress:
    if: github.event_name == 'pull_request'
    uses: ./.github/workflows/swift-migration-progress.yml # zizmor: ignore[self-repository]
    permissions:
      contents: read
      pull-requests: write

  build-kits:
    uses: ./.github/workflows/build-kits.yml # zizmor: ignore[self-repository]

  pr-notify:
    if: >-
      github.event_name == 'pull_request' &&
      github.event.pull_request.draft == false &&
      github.event.pull_request.head.repo.fork == false
    needs:
      - build-and-lint
      - native-tests
      - build-secondary-platforms
      - integration-tests
      - size-report
      - swift-migration-progress
      - build-kits
    name: Notify GChat
    permissions:
      contents: read
      id-token: write
    uses: ROKT/rokt-workflows/.github/workflows/oss_pr_opened_notification.yml@06c7e7d32c3280a3cff72f45ba4304730a509050 # main
    secrets:
      gchat_webhook: ${{ secrets.GCHAT_PRS_WEBHOOK }}