Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update actions workflows #13

Merged
merged 62 commits into from
Sep 15, 2023

Conversation

lambchop4prez
Copy link
Collaborator

@lambchop4prez lambchop4prez commented Sep 11, 2023

I finally sat down and put this together, I re-worked our build based on some experience from Brandywine and other things.

A few of the main features:

  • The build is now separated into a workflow, this allows re-use and encapsulation. All we care about with the build is that it produces unit tested NuGet packages and spits out a version.
  • Once the build is complete, a tag is created and the packages pushed up to GitHub packages.
  • If running on the main branch, we'll create a draft release with the new tag and all build artifacts.

A couple things that aren't done yet

  • Smoke Testing the produced packages. I want to make sure we can reference and build projects using netframework, netstandard, and netcore (see .github/workflows/package-tests.yml .github/workflows/smoke-tests.yml).
  • Software Bill of Materials - you probably remember hearing me talk about that before we were laid off, but this is a good excuse to learn the tools (since we may be required to in the future).
  • CLI Smoke Testing - Similar to the package tests, I want to make sure someone can dotnet tool install hot potato and be able to run the CLI.


env:
isMaster: ${{ github.ref == 'refs/heads/master' }}
push:
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So I don't think we get free dependabot anymore, I added vulnerability scanning to this, but would it make sense to add in a cron job to run this on main weekly?

@lambchop4prez lambchop4prez merged commit 6a347b8 into davidmbillie:main Sep 15, 2023
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants