Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(ci): apply lessons learned to monthly roadmap reminder cross-repo #4078

Merged
merged 13 commits into from
May 2, 2024
Merged

fix(ci): apply lessons learned to monthly roadmap reminder cross-repo #4078

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
5791d35
fix(parameters): make cache aware of single vs multiple calls
heitorlessa Jul 25, 2023
9d313e0
chore: cleanup, add test for single and nested
heitorlessa Jul 25, 2023
1dd7808
chore: first experiment with central but private workflow
heitorlessa Apr 5, 2024
b7fdb4e
chore: test workflow
heitorlessa Apr 5, 2024
8a448b6
chore(ci): test with branch over sha as it was not found
heitorlessa Apr 5, 2024
fa29925
chore(ci): use secrets for new workflow_call
heitorlessa Apr 5, 2024
9081206
chore(ci): update named secret input
heitorlessa Apr 5, 2024
aea7de7
chore(ci): apply least-privilege permissions at job level
heitorlessa Apr 5, 2024
05693d8
chore(ci): make monthly roadmap reminder workflow immutable for sec
heitorlessa Apr 5, 2024
ce9b2bd
chore(ci): add note about cronjob
heitorlessa Apr 5, 2024
3b2aa0e
Merge branch 'develop' into chore/roadmap-test
heitorlessa Apr 5, 2024
e44c20f
chore: add powertools actions to allow list until releases are done
heitorlessa May 2, 2024
700ed4c
Merge branch 'develop' into chore/roadmap-test
heitorlessa May 2, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 11 additions & 7 deletions .github/workflows/on_schedule_monthly_roadmap_reminder.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,17 +2,21 @@ name: Monthly roadmap reminder

on:
workflow_dispatch: {}
# schedule:
# - cron: '0 0 1 * *'
schedule:
- cron: '0 0 1 * *' # runs first day of the month

permissions:
contents: read
pull-requests: read
issues: read


jobs:
call-workflow-passing-data:
uses: aws-powertools/actions/.github/workflows/monthly_roadmap_reminder.yml@fd4575466e5c2ac10703ac16f5aa9fb8890f532a
with:
token: ${{ github.token }}
permissions:
contents: read
pull-requests: read
issues: write # create monthly roadmap report

# setting to `@main` until we have releases and governance installed
uses: aws-powertools/actions/.github/workflows/monthly_roadmap_reminder.yml@main
secrets:
token: ${{ secrets.GITHUB_TOKEN }}
4 changes: 3 additions & 1 deletion .github/workflows/secure_workflows.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,4 +34,6 @@ jobs:
- name: Ensure 3rd party workflows have SHA pinned
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@19ebcb0babbd282ae1822a0b9c28f3f1f25cea45 # v3.0.4
with:
allowlist: slsa-framework/slsa-github-generator
allowlist: |
slsa-framework/slsa-github-generator
aws-powertools/actions