81 строка
3.1 KiB
YAML
81 строка
3.1 KiB
YAML
name: "quest import"
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
reason:
|
|
description: "The reason for running the workflow"
|
|
required: true
|
|
default: "Manual run"
|
|
issue:
|
|
description: "The issue number to manually test"
|
|
required: true
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
import:
|
|
if: |
|
|
github.event_name == 'workflow_dispatch' ||
|
|
github.event.label.name == ':world_map: reQUEST' ||
|
|
github.event.label.name == ':pushpin: seQUESTered' ||
|
|
contains(github.event.issue.labels.*.name, ':world_map: reQUEST') ||
|
|
contains(github.event.issue.labels.*.name, ':pushpin: seQUESTered')
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
issues: write
|
|
pull-requests: write
|
|
id-token: write
|
|
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
|
|
with:
|
|
egress-policy: audit
|
|
|
|
- name: "Print manual run reason"
|
|
if: ${{ github.event_name == 'workflow_dispatch' }}
|
|
run: |
|
|
echo "Reason: ${{ github.event.inputs.reason }}"
|
|
echo "Issue number: ${{ github.event.inputs.issue }}"
|
|
|
|
- name: Azure OpenID Connect
|
|
id: azure-oidc-auth
|
|
uses: dotnet/docs-tools/.github/actions/oidc-auth-flow@5e8bcc78465d45a7544bba56509a1a69922b6a5a # main
|
|
with:
|
|
client-id: ${{ secrets.CLIENT_ID }}
|
|
tenant-id: ${{ secrets.TENANT_ID }}
|
|
audience: ${{ secrets.OSMP_API_AUDIENCE }}
|
|
|
|
# This step occurs when ran manually, passing the manual issue number input
|
|
- name: manual-sequester
|
|
if: ${{ github.event_name == 'workflow_dispatch' }}
|
|
id: manual-sequester
|
|
uses: dotnet/docs-tools/actions/sequester@5e8bcc78465d45a7544bba56509a1a69922b6a5a # main
|
|
env:
|
|
ImportOptions__ApiKeys__GitHubToken: ${{ secrets.GITHUB_TOKEN }}
|
|
ImportOptions__ApiKeys__AzureAccessToken: ${{ env.AZURE_ACCESS_TOKEN }}
|
|
ImportOptions__ApiKeys__QuestKey: ${{ secrets.QUEST_KEY }}
|
|
ImportOptions__ApiKeys__SequesterPrivateKey: ${{ secrets.SEQUESTER_PRIVATEKEY }}
|
|
ImportOptions__ApiKeys__SequesterAppID: ${{ secrets.SEQUESTER_APPID }}
|
|
with:
|
|
org: ${{ github.repository_owner }}
|
|
repo: ${{ github.repository }}
|
|
issue: ${{ github.event.inputs.issue }}
|
|
|
|
# This step occurs automatically, passing the issue number from the event
|
|
- name: auto-sequester
|
|
if: ${{ github.event_name != 'workflow_dispatch' }}
|
|
id: auto-sequester
|
|
uses: dotnet/docs-tools/actions/sequester@5e8bcc78465d45a7544bba56509a1a69922b6a5a # main
|
|
env:
|
|
ImportOptions__ApiKeys__GitHubToken: ${{ secrets.GITHUB_TOKEN }}
|
|
ImportOptions__ApiKeys__AzureAccessToken: $AZURE_ACCESS_TOKEN
|
|
ImportOptions__ApiKeys__QuestKey: ${{ secrets.QUEST_KEY }}
|
|
ImportOptions__ApiKeys__SequesterPrivateKey: ${{ secrets.SEQUESTER_PRIVATEKEY }}
|
|
ImportOptions__ApiKeys__SequesterAppID: ${{ secrets.SEQUESTER_APPID }}
|
|
with:
|
|
org: ${{ github.repository_owner }}
|
|
repo: ${{ github.repository }}
|
|
issue: ${{ github.event.issue.number }}
|