File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Load diff This file was deleted.
Original file line number Diff line number Diff line change @@ -4,12 +4,11 @@ name: Shared - Continuous Integration for common tasks
44on : # yamllint disable-line rule:truthy
55 workflow_call :
66
7- permissions :
8- contents : read
7+ permissions : {}
98
109jobs :
1110 linter :
12- uses : hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0
11+ uses : hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@b17226e57c8ef31f860719766656ebb6df017218 # 0.31.6
1312 permissions :
1413 actions : read
1514 contents : read
2322tests-charts :
2423 name : Tests - Charts
2524 runs-on : " ubuntu-latest"
25+ permissions :
26+ contents : read
2627 steps :
2728 - name : Test helm charts
28- uses : hoverkraft-tech/ci-github-container/actions/helm/test-chart@4f29319e02dd65152386c436e8c3136f380a0e71 # 0.28.0
29+ uses : hoverkraft-tech/ci-github-container/actions/helm/test-chart@a0bab9151cc074af9f6c8204ab42a48d2d570379 # 0.30.6
2930 with :
3031 helm-repositories : |
3132 bitnami https://charts.bitnami.com/bitnami
Original file line number Diff line number Diff line change @@ -7,11 +7,12 @@ on: # yamllint disable-line rule:truthy
77 pull_request_target :
88 branches : [main]
99
10- permissions :
11- contents : read
12- issues : write
13- pull-requests : write
10+ permissions : {}
1411
1512jobs :
1613 greetings :
17- uses : hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0
14+ uses : hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@b17226e57c8ef31f860719766656ebb6df017218 # 0.31.6
15+ permissions :
16+ contents : read
17+ issues : write
18+ pull-requests : write
Original file line number Diff line number Diff line change @@ -10,8 +10,7 @@ concurrency:
1010 group : ${{ github.workflow }}-${{ github.ref }}
1111 cancel-in-progress : true
1212
13- permissions :
14- contents : read
13+ permissions : {}
1514
1615jobs :
1716 ci :
@@ -28,10 +27,12 @@ jobs:
2827 needs : ci
2928 if : github.event_name != 'schedule'
3029 runs-on : ubuntu-latest
30+ permissions :
31+ contents : read
3132 steps :
32- - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 .0.0
33+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 .0.2
3334
34- - uses : hoverkraft-tech/ci-github-container/actions/helm/generate-docs@4f29319e02dd65152386c436e8c3136f380a0e71 # 0.28.0
35+ - uses : hoverkraft-tech/ci-github-container/actions/helm/generate-docs@a0bab9151cc074af9f6c8204ab42a48d2d570379 # 0.30.6
3536 with :
3637 working-directory : ./postal
3738 values-file : ./postal/values.yaml
Original file line number Diff line number Diff line change @@ -17,17 +17,14 @@ on: # yamllint disable-line rule:truthy
1717 before it; to go back further, enter an earlier SHA here"
1818 required : false
1919
20- permissions :
21- contents : read
22- issues : write
23-
24- concurrency :
25- group : ${{ github.workflow }}-${{ github.ref }}
26- cancel-in-progress : true
20+ permissions : {}
2721
2822jobs :
2923 main :
30- uses : hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0
24+ uses : hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@b17226e57c8ef31f860719766656ebb6df017218 # 0.31.6
25+ permissions :
26+ contents : read
27+ issues : write
3128 with :
3229 manual-commit-ref : ${{ inputs.manual-commit-ref }}
3330 manual-base-ref : ${{ inputs.manual-base-ref }}
Original file line number Diff line number Diff line change @@ -7,17 +7,19 @@ on: # yamllint disable-line rule:truthy
77 pull_request :
88 types : [opened, reopened, synchronize]
99
10- permissions :
11- contents : read
12- pull-requests : write
13-
1410concurrency :
1511 group : ${{ github.workflow }}-${{ github.ref }}
1612 cancel-in-progress : true
1713
14+ permissions : {}
15+
1816jobs :
1917 release :
20- uses : hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml@42d50a3461a177557ca3f83b1d927d7c0783c894 # 0.11.2
18+ uses : hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml@84e8ace407055e7a40ba6670a8c697e1ce2dfafa # 0.20.1
19+ permissions :
20+ contents : write
21+ id-token : write
22+ pull-requests : write
2123 with :
2224 github-app-id : ${{ vars.CI_BOT_APP_ID }}
2325 secrets :
Original file line number Diff line number Diff line change @@ -9,8 +9,7 @@ concurrency:
99 group : ${{ github.workflow }}-${{ github.ref }}
1010 cancel-in-progress : true
1111
12- permissions :
13- contents : read
12+ permissions : {}
1413
1514jobs :
1615 ci :
Original file line number Diff line number Diff line change @@ -8,11 +8,7 @@ concurrency:
88 group : ${{ github.workflow }}-${{ github.ref }}
99 cancel-in-progress : true
1010
11- permissions :
12- actions : read
13- contents : read
14- statuses : write
15- security-events : write
11+ permissions : {}
1612
1713jobs :
1814 check-branches :
@@ -26,28 +22,41 @@ jobs:
2622 exit 1
2723 fi
2824 echo "Branch check passed. Proceeding with the release."
25+
2926ci :
3027 needs : check-branches
3128 name : Continuous Integration
3229 uses : ./.github/workflows/__shared-ci.yml
30+ permissions :
31+ actions : read
32+ contents : read
33+ security-events : write
34+ statuses : write
35+ secrets : inherit
3336
3437 release :
3538 needs : ci
3639 name : Release
3740 runs-on : ubuntu-latest
41+ permissions :
42+ contents : write
3843 outputs :
3944 tag : ${{ steps.create-release.outputs.tag }}
4045 steps :
4146 - id : create-release
42- uses : hoverkraft-tech/ci-github-publish/actions/release/create@42d50a3461a177557ca3f83b1d927d7c0783c894 # 0.11.2
47+ uses : hoverkraft-tech/ci-github-publish/actions/release/create@84e8ace407055e7a40ba6670a8c697e1ce2dfafa # 0.20.1
4348
4449 release-chart :
4550 name : " Release Helm Chart"
4651 needs : release
47- runs-on : ubuntu-latest
52+ runs-on : ubuntu-latest*
53+ permissions :
54+ contents : write
55+ packages : write
56+ pull-requests : write
4857 steps :
4958 - id : release
50- uses : hoverkraft-tech/ci-github-container/actions/helm/release-chart@4f29319e02dd65152386c436e8c3136f380a0e71 # 0.28.0
59+ uses : hoverkraft-tech/ci-github-container/actions/helm/release-chart@a0bab9151cc074af9f6c8204ab42a48d2d570379 # 0.30.6
5160 with :
5261 chart : postal
5362 path : ./postal
5665 oci-registry-password : ${{ secrets.GITHUB_TOKEN }}
5766 update-tag-paths : .version
5867
59- - uses : hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0
68+ - uses : hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request@b17226e57c8ef31f860719766656ebb6df017218 # 0.31.6
6069 with :
6170 github-token : ${{ secrets.GITHUB_TOKEN }}
6271 branch : release-chart-${{ needs.release.outputs.tag }}
Original file line number Diff line number Diff line change @@ -8,10 +8,11 @@ on: # yamllint disable-line rule:truthy
88 - edited
99 - synchronize
1010
11- permissions :
12- contents : write
13- pull-requests : write
11+ permissions : {}
1412
1513jobs :
1614 main :
17- uses : hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0
15+ uses : hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@b17226e57c8ef31f860719766656ebb6df017218 # 0.31.6
16+ permissions :
17+ contents : write
18+ pull-requests : write
Original file line number Diff line number Diff line change @@ -5,10 +5,11 @@ on: # yamllint disable-line rule:truthy
55 schedule :
66 - cron : " 30 1 * * *"
77
8- permissions :
9- issues : write
10- pull-requests : write
8+ permissions : {}
119
1210jobs :
1311 main :
14- uses : hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0
12+ uses : hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@b17226e57c8ef31f860719766656ebb6df017218 # 0.31.6
13+ permissions :
14+ issues : write
15+ pull-requests : write
You can’t perform that action at this time.
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
0 commit comments