Sync and update Compliance Checks #21
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Sync and update Compliance Checks | |
| on: | |
| # Manually trigger the workflow | |
| workflow_dispatch: | |
| permissions: | |
| # We will create a pull request, so we need write permissions | |
| pull-requests: write | |
| # We will be committing to the repository, so we need write permissions | |
| contents: write | |
| jobs: | |
| sync-and-update: | |
| runs-on: ubuntu-latest | |
| services: | |
| postgres: | |
| image: postgres:17.2 | |
| env: | |
| POSTGRES_DB: dashboard | |
| POSTGRES_USER: openjs | |
| POSTGRES_PASSWORD: password | |
| ports: | |
| - 5432:5432 | |
| options: >- | |
| --health-cmd="pg_isready -U openjs" | |
| --health-interval=10s | |
| --health-timeout=5s | |
| --health-retries=5 | |
| steps: | |
| - name: Checkout Repository | |
| uses: actions/checkout@v4 | |
| - name: Create or Checkout Branch (chore/update-content) | |
| run: | | |
| git fetch origin chore/update-content || true | |
| git checkout chore/update-content || git checkout -b chore/update-content | |
| - name: Clone OpenJS Foundation Dashboard | |
| run: | | |
| git clone https://github.com/secure-dashboards/openjs-foundation-dashboard.git temp-openjs-dashboard | |
| cd temp-openjs-dashboard | |
| npm install | |
| npm run db:migrate | |
| npm run db:export-checks | |
| mkdir -p output | |
| cp output/checks.json ../data/checks.json | |
| cd .. | |
| rm -rf temp-openjs-dashboard | |
| env: | |
| PGHOST: localhost | |
| PGUSER: openjs | |
| PGPASSWORD: password | |
| PGDATABASE: dashboard | |
| - name: Debug Git Changes | |
| run: | | |
| git status | |
| git diff | |
| - name: Commit Updated Checks | |
| run: | | |
| git config user.name "GitHub Actions" | |
| git config user.email "actions@github.com" | |
| git add -A | |
| git diff --cached --quiet || git commit -m "chore: sync with OpenJS Foundation Dashboard" | |
| - name: Install Dependencies and update dynamic content | |
| run: | | |
| npm install | |
| npm run populate-details | |
| npm run populate-implementations | |
| - name: Debug Git Changes | |
| run: | | |
| git status | |
| git diff | |
| - name: Commit and Push Changes | |
| run: | | |
| git config user.name "GitHub Actions" | |
| git config user.email "actions@github.com" | |
| git add -A | |
| git diff --cached --quiet || git commit -m "chore: auto-update content" | |
| git push origin chore/update-content | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Create and Assign Pull Request | |
| run: | | |
| gh pr create \ | |
| --base main \ | |
| --head chore/update-content \ | |
| --title "[AUTO] Sync with dashboard database" \ | |
| --body "This PR updates the content based on the current state of the Dashboard." \ | |
| --assignee "${{ github.actor }}" \ | |
| --reviewer "${{ github.actor }}" | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |