gitops/.github/workflows/checks.yml at main · fgfusion/gitops · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
# Copyright The OpenTelemetry Authors
# SPDX-License-Identifier: Apache-2.0
name: Checks

on:
  merge_group:
    types: [checks_requested]
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read

jobs:
  build_images:
    permissions:  # required by the reusable workflow
      contents: read
      packages: write
    uses: ./.github/workflows/component-build-images.yml
    with:
      push: ${{ github.event_name == 'push' }}
      # Use a non-release tag for PR builds; tags are not pushed when push=false.
      version: ${{ github.event_name == 'push' && 'main' || 'dev' }}
    secrets: inherit

  markdownlint:
    runs-on: ubuntu-latest
    steps:
      - name: check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      - name: install dependencies
        run: npm install
      - name: run markdownlint
        run: make markdownlint

  yamllint:
    runs-on: ubuntu-latest
    steps:
      - name: check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
        with:
          python-version: '3.x'
      - name: install yamllint
        run: make install-yamllint
      - name: run yamllint
        run: yamllint . -f github --strict

  misspell:
    runs-on: ubuntu-latest
    steps:
      - name: check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      - name: run misspell
        run: make misspell

  checklinks:
    name: lychee
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      - name: Restore lychee cache
        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
        id: cache-restore
        with:
          path: .lycheecache
          key: ${{ runner.os }}-lychee-${{ hashFiles('.lychee.toml') }}
          restore-keys: |
            ${{ runner.os }}-lychee-
      - name: Run lychee
        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411  # v2.8.0
        with:
          args: --config .lychee.toml --cache --max-cache-age 3d --cache-exclude-status 300..=599 .
          fail: true
      - name: Save lychee cache
        if: always()
        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
        with:
          path: .lycheecache
          key: ${{ steps.cache-restore.outputs.cache-primary-key }}

  sanity:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      - name: run sanitycheck.py
        run: python3 ./internal/tools/sanitycheck.py

  checklicense:
    runs-on: ubuntu-latest
    steps:
      - name: check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      - name: run checklicense
        run: make checklicense

  weaver-check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      - name: run weaver registry check
        run: |
          docker run --rm \
            --mount "type=bind,source=${{ github.workspace }}/telemetry-schema,target=/home/weaver/source,readonly" \
            otel/weaver:v0.22.1 \
            registry check -r source

  check-react-native-changes:
    runs-on: ubuntu-latest
    outputs:
      should_build: ${{ steps.filter.outputs.react_native }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      - uses: dorny/paths-filter@v4
        id: filter
        with:
          filters: |
            react_native:
              - 'src/react-native-app/**'
              - '.github/workflows/**'

  react-native-android:
    needs: check-react-native-changes
    if: needs.check-react-native-changes.outputs.should_build == 'true'
    uses: ./.github/workflows/react-native-build.yml

  build-test:
    needs: [
      build_images,
      markdownlint,
      yamllint,
      misspell,
      checklinks,
      sanity,
      checklicense,
      weaver-check,
      react-native-android
    ]
    if: always() && !cancelled()
    runs-on: ubuntu-latest
    steps:
      - name: Report CI status
        shell: bash
        env:
          CI_SUCCESS: ${{ !contains(needs.*.result, 'failure') }}
        run: |
          if [ "${CI_SUCCESS}" == "true" ]
          then
            echo 'Build complete ✓'
          else
            echo 'Build failed ✗'
            exit 1
          fi