16
16
- ' [0-9][0-9].[0-9]+.[0-9]+'
17
17
pull_request :
18
18
merge_group :
19
+ schedule :
20
+ # Run every Saturday morning: https://crontab.guru/#15_3_*_*_6
21
+ - cron : ' 15 3 * * 6'
22
+ workflow_dispatch :
19
23
20
24
env :
21
25
CARGO_TERM_COLOR : always
42
46
with :
43
47
packages : protobuf-compiler krb5-user libkrb5-dev libclang-dev liblzma-dev libssl-dev pkg-config
44
48
version : 1.0
45
- - uses : actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
49
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
46
50
with :
47
51
submodules : recursive
48
52
- uses : dtolnay/rust-toolchain@d8352f6b1d2e870bc5716e7a6d9b65c4cc244a1a
@@ -64,11 +68,11 @@ jobs:
64
68
# repository: test
65
69
#
66
70
# - all tagged releases land in stable:
67
- # condition: github.event_name == 'create ' & github.ref.startswith('refs/tags/')
71
+ # condition: github.event_name == 'push ' & github.ref.startswith('refs/tags/')
68
72
# repository: stable
69
73
#
70
- # - all pushes to main (i.e. PR-merges) land in dev:
71
- # condition: github.event_name == 'push' & github.ref == 'refs/heads/main'
74
+ # - all pushes to main (i.e. PR-merges) and all scheduled/manual workflow runs on main land in dev:
75
+ # condition: ( github.event_name == 'push' | github.event_name == 'schedule' | github.event_name == 'workflow_dispatch' ) & github.ref == 'refs/heads/main'
72
76
# repository: dev
73
77
#
74
78
# Any other scenarios (e.g. when a branch is created/pushed) will cause the publish step to be skipped, most commonly this is expected to happen for the
@@ -87,10 +91,10 @@ jobs:
87
91
if [[ $TRIGGER == "pull_request" ]]; then
88
92
echo "exporting test as target helm repo: ${{ env.TEST_REPO_HELM_URL }}"
89
93
echo "helm_repo=${{ env.TEST_REPO_HELM_URL }}" >> $GITHUB_OUTPUT
90
- elif [[ $TRIGGER == "push" && $GITHUB_REF == "refs/heads/main" ]]; then
94
+ elif [[ ( $TRIGGER == "push" || $TRIGGER == "schedule" || $TRIGGER == "workflow_dispatch" ) && $GITHUB_REF == "refs/heads/main" ]]; then
91
95
echo "exporting dev as target helm repo: ${{ env.DEV_REPO_HELM_URL }}"
92
96
echo "helm_repo=${{ env.DEV_REPO_HELM_URL }}" >> $GITHUB_OUTPUT
93
- elif [[ ( $TRIGGER == "create" || $TRIGGER == " push" ) && $GITHUB_REF == refs/tags/* ]]; then
97
+ elif [[ $TRIGGER == "push" && $GITHUB_REF == refs/tags/* ]]; then
94
98
echo "exporting stable as target helm repo: ${{ env.STABLE_REPO_HELM_URL }}"
95
99
echo "helm_repo=${{ env.STABLE_REPO_HELM_URL }}" >> $GITHUB_OUTPUT
96
100
else
@@ -111,7 +115,7 @@ jobs:
111
115
continue-on-error : ${{ matrix.checks == 'advisories' }}
112
116
113
117
steps :
114
- - uses : actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
118
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
115
119
with :
116
120
submodules : recursive
117
121
- uses : EmbarkStudios/cargo-deny-action@3f4a782664881cf5725d0ffd23969fcce89fd868 # v1.6.3
@@ -122,7 +126,7 @@ jobs:
122
126
name : Run Rustfmt
123
127
runs-on : ubuntu-latest
124
128
steps :
125
- - uses : actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
129
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
126
130
with :
127
131
submodules : recursive
128
132
- uses : dtolnay/rust-toolchain@d8352f6b1d2e870bc5716e7a6d9b65c4cc244a1a
@@ -140,7 +144,7 @@ jobs:
140
144
with :
141
145
packages : protobuf-compiler krb5-user libkrb5-dev libclang-dev liblzma-dev libssl-dev pkg-config
142
146
version : 1.0
143
- - uses : actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
147
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
144
148
with :
145
149
submodules : recursive
146
150
- uses : dtolnay/rust-toolchain@d8352f6b1d2e870bc5716e7a6d9b65c4cc244a1a
@@ -175,7 +179,7 @@ jobs:
175
179
with :
176
180
packages : protobuf-compiler krb5-user libkrb5-dev libclang-dev liblzma-dev libssl-dev pkg-config
177
181
version : 1.0
178
- - uses : actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
182
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
179
183
with :
180
184
submodules : recursive
181
185
- uses : dtolnay/rust-toolchain@d8352f6b1d2e870bc5716e7a6d9b65c4cc244a1a
@@ -197,7 +201,7 @@ jobs:
197
201
with :
198
202
packages : protobuf-compiler krb5-user libkrb5-dev libclang-dev liblzma-dev libssl-dev pkg-config
199
203
version : 1.0
200
- - uses : actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
204
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
201
205
with :
202
206
submodules : recursive
203
207
- uses : dtolnay/rust-toolchain@d8352f6b1d2e870bc5716e7a6d9b65c4cc244a1a
@@ -217,7 +221,7 @@ jobs:
217
221
name : Check if committed README is the one we would render from the available parts
218
222
runs-on : ubuntu-latest
219
223
steps :
220
- - uses : actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
224
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
221
225
with :
222
226
submodules : recursive
223
227
- uses : actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
@@ -255,7 +259,7 @@ jobs:
255
259
with :
256
260
packages : protobuf-compiler krb5-user libkrb5-dev libclang-dev liblzma-dev libssl-dev pkg-config
257
261
version : 1.0
258
- - uses : actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
262
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
259
263
with :
260
264
submodules : recursive
261
265
- name : Set up Helm
@@ -324,7 +328,7 @@ jobs:
324
328
with :
325
329
packages : protobuf-compiler krb5-user libkrb5-dev libclang-dev liblzma-dev libssl-dev pkg-config
326
330
version : 1.0
327
- - uses : actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
331
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
328
332
with :
329
333
submodules : recursive
330
334
- uses : cachix/install-nix-action@8887e596b4ee1134dae06b98d573bd674693f47c # v26
@@ -349,7 +353,7 @@ jobs:
349
353
- name : Install cosign
350
354
uses : sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
351
355
- name : Install syft
352
- uses : anchore/sbom-action/download-syft@7ccf588e3cf3cc2611714c2eeae48550fbc17552 # v0.15.11
356
+ uses : anchore/sbom-action/download-syft@e8d2a6937ecead383dfe75190d104edd1f9c5751 # v0.16.0
353
357
- name : Build Docker image and Helm chart
354
358
run : |
355
359
# Installing helm on BuildJet only
@@ -388,7 +392,7 @@ jobs:
388
392
- name : Install cosign
389
393
uses : sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
390
394
- name : Checkout
391
- uses : actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
395
+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
392
396
with :
393
397
submodules : recursive
394
398
# This step checks if the current run was triggered by a push to a pr (or a pr being created).
0 commit comments