Using bot in the build workflow

CatChen · Jun 14, 2024 · b6ef172 · b6ef172
1 parent cd3fccd
commit b6ef172
Show file tree

Hide file tree

Showing 3 changed files with 32 additions and 20 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -16,24 +16,36 @@ on:
 jobs:
   build:
     name: Build
+    if: ${{ !startsWith(github.head_ref, 'workflows/tests/') }}
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
       contents: write
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: get-github-app-token
+        with:
+          app-id: ${{ secrets.CHECK_GIT_STATUS_BOT_APP_ID }}
+          private-key: ${{ secrets.CHECK_GIT_STATUS_BOT_APP_PRIVATE_KEY }}
+
       - uses: actions/checkout@v4
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
           ref: ${{ inputs.ref || github.head_ref }}
+          token: ${{ steps.get-github-app-token.outputs.token }}
 
       - uses: actions/setup-node@v4
         with:
           node-version-file: '.nvmrc'
           check-latest: true
+          cache: yarn
 
       - name: Install dependencies
         run: yarn
 
+      - name: Lint
+        run: yarn lint --fix
+
       - name: Build
         run: yarn build
 
@@ -45,5 +57,5 @@ jobs:
         with:
           fail-if-not-clean: ${{ github.actor != 'dependabot[bot]' || github.actor_id != 49699333 }}
           push-if-not-clean: true
-          push-token: ${{ secrets.CHECK_GIT_STATUS_ACTION_TOKEN }}
-          request-changes-token: ${{ secrets.GITHUB_TOKEN }}
+          request-changes-if-not-clean: false
+          push-token: ${{ steps.get-github-app-token.outputs.token }}
diff --git a/.github/workflows/ship.yml b/.github/workflows/ship.yml
@@ -29,9 +29,9 @@ concurrency:
   group: |-
     ${{
       github.event.pull_request.number ||
-      join(github.event.check_run.pull_requests.*.number, ', ') ||
-      join(github.event.check_suite.pull_requests.*.number, ', ') ||
-      join(github.event.workflow_run.pull_requests.*.number, ', ') ||
+      github.event.check_run.pull_requests[0].number ||
+      github.event.check_suite.pull_requests[0].number ||
+      github.event.workflow_run.pull_requests[0].number ||
       github.sha ||
       github.ref
     }}
@@ -46,9 +46,9 @@ jobs:
           CONCURRENCY_GROUP: |-
             ${{
               github.event.pull_request.number ||
-              join(github.event.check_run.pull_requests.*.number, ', ') ||
-              join(github.event.check_suite.pull_requests.*.number, ', ') ||
-              join(github.event.workflow_run.pull_requests.*.number, ', ') ||
+              github.event.check_run.pull_requests[0].number ||
+              github.event.check_suite.pull_requests[0].number ||
+              github.event.workflow_run.pull_requests[0].number ||
               github.sha ||
               github.ref
             }}
@@ -61,9 +61,9 @@ jobs:
       ${{
         github.base_ref == 'main' ||
         github.event.pull_request.base.ref == 'main' ||
-        contains(github.event.check_run.pull_requests.*.base.ref, 'main') ||
-        contains(github.event.check_suite.pull_requests.*.base.ref, 'main') ||
-        contains(github.event.workflow_run.pull_requests.*.base.ref, 'main')
+        contains(github.event.check_run.pull_requests[0].base.ref, 'main') ||
+        contains(github.event.check_suite.pull_requests[0].base.ref, 'main') ||
+        contains(github.event.workflow_run.pull_requests[0].base.ref, 'main')
       }}
     runs-on: ubuntu-latest
     permissions:
@@ -93,9 +93,9 @@ jobs:
       ${{
         github.base_ref == 'main' ||
         github.event.pull_request.base.ref == 'main' ||
-        contains(github.event.check_run.pull_requests.*.base.ref, 'main') ||
-        contains(github.event.check_suite.pull_requests.*.base.ref, 'main') ||
-        contains(github.event.workflow_run.pull_requests.*.base.ref, 'main')
+        contains(github.event.check_run.pull_requests[0].base.ref, 'main') ||
+        contains(github.event.check_suite.pull_requests[0].base.ref, 'main') ||
+        contains(github.event.workflow_run.pull_requests[0].base.ref, 'main')
       }}
     runs-on: ubuntu-latest
     permissions:

diff --git a/.github/workflows/test-pr.yml b/.github/workflows/test-pr.yml
@@ -8,9 +8,9 @@ concurrency:
   group: |-
     ${{
       github.event.pull_request.number ||
-      join(github.event.check_run.pull_requests.*.number, ', ') ||
-      join(github.event.check_suite.pull_requests.*.number, ', ') ||
-      join(github.event.workflow_run.pull_requests.*.number, ', ') ||
+      join(github.event.check_run.pull_requests[0].number, ', ') ||
+      join(github.event.check_suite.pull_requests[0].number, ', ') ||
+      join(github.event.workflow_run.pull_requests[0].number, ', ') ||
       github.sha ||
       github.ref
     }}
@@ -27,9 +27,9 @@ jobs:
           CONCURRENCY_GROUP: |-
             ${{
               github.event.pull_request.number ||
-              join(github.event.check_run.pull_requests.*.number, ', ') ||
-              join(github.event.check_suite.pull_requests.*.number, ', ') ||
-              join(github.event.workflow_run.pull_requests.*.number, ', ') ||
+              join(github.event.check_run.pull_requests[0].number, ', ') ||
+              join(github.event.check_suite.pull_requests[0].number, ', ') ||
+              join(github.event.workflow_run.pull_requests[0].number, ', ') ||
               github.sha ||
               github.ref
             }}