greengage_sync/.github/workflows/greengage-ci.yml at a62a81cdff3447eee0830b888f341b30d5d8274f · GreengageDB/greengage_sync · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
# .github/workflows/greengage-ci.yml
name: Greengage CI

on:
  push:
    branches: ['next']  # Trigger on push to main (after merged PR)
    tags: ['8.*']   # Trigger on tags for versioned releases
  pull_request:
    branches: ['**'] # Trigger on pull requests for all branches

# Concurrency control to cancel previous runs on new push to same PR/branch
concurrency:
  group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.event.pull_request.number || github.ref }}
  cancel-in-progress: true  # Automatically cancel any previous runs for the same group

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        target_os: [ubuntu]
    permissions:
      contents: read  # Explicit for default behavior
      packages: write # Required for GHCR access
      actions: write  # Required for artifact upload
    uses: greengagedb/greengage-ci/.github/workflows/greengage-reusable-build.yml@v41
    with:
      version: 8
      target_os: ${{ matrix.target_os }}
    secrets:
      ghcr_token: ${{ secrets.GITHUB_TOKEN }}

  behave-tests:
    needs: build  # Wait for build to complete
    if: github.event_name == 'pull_request'  # Only for PR
    strategy:
      fail-fast: false
      matrix:
        target_os: [ubuntu]
    permissions:
      contents: read  # Explicit for default behavior
      packages: read  # Explicit for GHCR access clarity
      actions: write  # Required for artifact upload
    uses: greengagedb/greengage-ci/.github/workflows/greengage-reusable-tests-behave.yml@v41
    with:
      version: 8
      target_os: ${{ matrix.target_os }}
    secrets:
      ghcr_token: ${{ secrets.GITHUB_TOKEN }}

  regression-tests:
    needs: build
    if: github.event_name == 'pull_request'  # Only for PR
    strategy:
      fail-fast: false
      matrix:
        target_os: [ubuntu]
    permissions:
      contents: read  # Explicit for default behavior
      packages: read  # Explicit for GHCR access clarity
      actions: write  # Required for artifact upload
    uses: greengagedb/greengage-ci/.github/workflows/greengage-reusable-tests-regression.yml@v41
    with:
      version: 8
      target_os: ${{ matrix.target_os }}
    secrets:
      ghcr_token: ${{ secrets.GITHUB_TOKEN }}

  orca-tests:
    needs: build
    if: github.event_name == 'pull_request'  # Only for PR
    strategy:
      fail-fast: false
      matrix:
        target_os: [ubuntu]
    permissions:
      contents: read  # Explicit for default behavior
      packages: read  # Explicit for GHCR access clarity
      actions: write  # Required for artifact upload
    uses: greengagedb/greengage-ci/.github/workflows/greengage-reusable-tests-orca.yml@v41
    with:
      version: 8
      target_os: ${{ matrix.target_os }}
    secrets:
      ghcr_token: ${{ secrets.GITHUB_TOKEN }}

  resgroup-tests:
    needs: build
    if: github.event_name == 'pull_request'  # Only for PR
    strategy:
      fail-fast: false
      matrix:
        target_os: [ubuntu]
    permissions:
      contents: read  # Explicit for default behavior
      packages: read  # Explicit for GHCR access clarity
      actions: write  # Required for artifact upload
    uses: greengagedb/greengage-ci/.github/workflows/greengage-reusable-tests-resgroup.yml@v41
    with:
      version: 8
      target_os: ${{ matrix.target_os }}
    secrets:
      ghcr_token: ${{ secrets.GITHUB_TOKEN }}

  jit-tests:
    needs: build
    if: github.event_name == 'pull_request'  # Only for PR
    strategy:
      fail-fast: false
      matrix:
        target_os: [ubuntu]
    permissions:
      contents: read  # Explicit for default behavior
      packages: read  # Explicit for GHCR access clarity
      actions: write  # Required for artifact upload
    uses: greengagedb/greengage-ci/.github/workflows/greengage-reusable-tests-jit.yml@v41
    with:
      version: 8
      target_os: ${{ matrix.target_os }}
    secrets:
      ghcr_token: ${{ secrets.GITHUB_TOKEN }}

  upload:
    if: github.event_name == 'push'  # For push to main or tags
    needs: build  # For push (main or tags)
    strategy:
      fail-fast: false
      matrix:
        target_os: [ubuntu]
    permissions:
      contents: read  # Explicit for default behavior
      packages: write # Required for GHCR access
      actions: write  # Required for artifact upload
    uses: greengagedb/greengage-ci/.github/workflows/greengage-reusable-upload.yml@v41
    with:
      version: 8
      target_os: ${{ matrix.target_os }}
    secrets:
      ghcr_token: ${{ secrets.GITHUB_TOKEN }}
      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}