Skip to content

chore: refactor ci and versioning scheme #1

chore: refactor ci and versioning scheme

chore: refactor ci and versioning scheme #1

---
name: Continuous Integration
on:
merge_group:
pull_request:
push:
branches: [main]
tags: ["v*.*.*"]
workflow_dispatch:
concurrency:
group: ${{ github.ref }}-${{ github.workflow }}
cancel-in-progress: true
permissions:
contents: read
jobs:
build-push:

Check failure on line 20 in .github/workflows/continuous-integration.yml

View workflow run for this annotation

GitHub Actions / Continuous Integration

Invalid workflow file

The workflow is not valid. .github/workflows/continuous-integration.yml (Line: 20, Col: 3): Error calling workflow 'philips-software/amp-devcontainer/.github/workflows/build-push.yml@7426b0e496b019708a93dab397373db645c1c288'. The nested job 'build-push' is requesting 'packages: write', but is only allowed 'packages: none'. .github/workflows/continuous-integration.yml (Line: 20, Col: 3): Error calling workflow 'philips-software/amp-devcontainer/.github/workflows/build-push.yml@7426b0e496b019708a93dab397373db645c1c288'. The nested job 'merge-image' is requesting 'attestations: write, contents: write, packages: write, pull-requests: write, id-token: write', but is only allowed 'attestations: none, contents: read, packages: none, pull-requests: none, id-token: none'.
uses: ./.github/workflows/build-push.yml
secrets: inherit
integration-test:
strategy:
matrix:
flavor: [cpp, rust]
runner: ["ubuntu-latest", "ubuntu-24.04-arm"]
needs: build-push
uses: ./.github/workflows/integration-test.yml
secrets: inherit
with:
flavor: ${{ matrix.flavor }}
runner: ${{ matrix.runner }}
acceptance-test:
needs: build-push
uses: ./.github/workflows/acceptance-test.yml
secrets: inherit
with:
flavor: cpp
publish-test-results:
runs-on: ubuntu-latest
permissions:
checks: write
pull-requests: write
needs: [acceptance-test, integration-test]
if: always()
steps:
- uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
with:
egress-policy: audit
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
with:
merge-multiple: true
pattern: test-results-*
- uses: EnricoMi/publish-unit-test-result-action@3a74b2957438d0b6e2e61d67b05318aa25c9e6c6 # v2.20.0
with:
files: test-report-*.xml