refreshcerts.yaml

name: Refreshcerts
on:
  workflow_dispatch:
  schedule:
    - cron: '42 12 * * *' # At 1242 each day

permissions:  # added using https://github.com/step-security/secure-workflows
  contents: read

jobs:
  checkcert:
    runs-on: ubuntu-latest
    outputs:
      cert: ${{ steps.checkcert.outputs.cert }}
    steps:
      - name: checkout repo content
        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0

      - id: checkcert
        name: Check for new cert
        run: |
          cd tests/at_functional_test/test/testData
          CERTURL='https://raw.githubusercontent.com/atsign-foundation/at_server/trunk/tools/build_virtual_environment/ve_base/contents/atsign/secondary/base/certs/cert.pem'
          wget -O cert.pem ${CERTURL}
          if [ -z "$(git status --porcelain)" ]; then
            echo 'No new cert'
            echo "cert=NOTNEW" >> $GITHUB_OUTPUT
          else
            echo "cert=NEW" >> $GITHUB_OUTPUT
          fi

  update_cert_in_repo:
    needs: [checkcert]
    if: ${{ needs.checkcert.outputs.cert == 'NEW' }}
    runs-on: ubuntu-latest
    steps:
      - name: checkout_to_update_version
        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0

      - name: Update stable version
        id: getcert
        run: |
          cd tests/at_functional_test/test/testData
          CERTURL='https://raw.githubusercontent.com/atsign-foundation/at_server/trunk/tools/build_virtual_environment/ve_base/contents/atsign/secondary/base/certs/cert.pem'
          wget -O cert.pem ${CERTURL}

      - name: Create Pull Request
        id: cpr
        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2
        with:
          token: ${{ secrets.MY_GITHUB_TOKEN }}
          commit-message: 'chore: Update cert in testdata'
          committer: library-action[bot] <41898282+github-actions[bot]@users.noreply.github.com>
          author: library-action[bot] <41898282+github-actions[bot]@users.noreply.github.com>
          signoff: false
          add-paths: .
          branch: bot-new-cert
          delete-branch: true
          title: 'chore: Update cert in testdata'
          body: |
            New cert copied from at_server
          labels: |
            operations
          assignees: cpswan
          reviewers: gkc
          draft: false