File tree Expand file tree Collapse file tree 9 files changed +141
-25
lines changed Expand file tree Collapse file tree 9 files changed +141
-25
lines changed Original file line number Diff line number Diff line change 6
6
# Run once a day
7
7
schedule :
8
8
- cron : " 0 0 * * *"
9
+ # Add workflow_call trigger
10
+ workflow_call :
11
+ # Define any secrets that need to be passed from the caller
12
+ secrets :
13
+ CI_AWS_ROLE_ARN :
14
+ required : true
9
15
10
16
permissions :
11
17
id-token : write
Original file line number Diff line number Diff line change 1
1
name : AWS CodeBuild Batch Workflow
2
2
3
3
on :
4
- pull_request :
5
- push :
6
- # Run once a day
7
- schedule :
8
- - cron : " 0 0 * * * "
4
+ workflow_call :
5
+ # Define any secrets that need to be passed from the caller
6
+ secrets :
7
+ CI_AWS_ROLE_ARN :
8
+ required : true
9
9
10
10
permissions :
11
11
id-token : write
Original file line number Diff line number Diff line change 1
1
name : Continuous Integration tests for the decrypt oracle
2
2
3
3
on :
4
- pull_request :
5
- push :
6
- # Run once a day
7
- schedule :
8
- - cron : ' 0 0 * * *'
4
+ workflow_call :
9
5
10
6
jobs :
11
7
tests :
Original file line number Diff line number Diff line change 1
1
name : Static analysis checks
2
2
3
3
on :
4
- pull_request :
5
- push :
6
- # Run once a day
7
- schedule :
8
- - cron : ' 0 0 * * *'
4
+ workflow_call :
9
5
10
6
jobs :
11
7
analysis :
Original file line number Diff line number Diff line change 1
1
name : Continuous Integration tests for the test vector handler
2
2
3
3
on :
4
- pull_request :
5
- push :
6
- # Run once a day
7
- schedule :
8
- - cron : ' 0 0 * * *'
4
+ workflow_call :
5
+ # Define any secrets that need to be passed from the caller
6
+ secrets :
7
+ INTEG_AWS_ACCESS_KEY_ID :
8
+ required : true
9
+ INTEG_AWS_SECRET_ACCESS_KEY :
10
+ required : true
9
11
10
12
jobs :
11
13
tests :
Original file line number Diff line number Diff line change 1
1
name : Continuous Integration tests
2
2
3
3
on :
4
- pull_request :
5
- push :
6
- # Run once a day
7
- schedule :
8
- - cron : ' 0 0 * * *'
4
+ workflow_call :
9
5
10
6
env :
11
7
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID : |
Original file line number Diff line number Diff line change
1
+ # This workflow runs every weekday at 15:00 UTC (8AM PDT)
2
+ name : Daily CI
3
+
4
+ on :
5
+ schedule :
6
+ - cron : " 00 15 * * 1-5"
7
+
8
+ jobs :
9
+ codebuild_batch :
10
+ # Don't run the cron builds on forks
11
+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
12
+ uses : ./.github/workflows/ci_codebuild_batch.yml
13
+ secrets :
14
+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
15
+ codebuild_tests :
16
+ # Don't run the cron builds on forks
17
+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
18
+ uses : ./.github/workflows/ci_codebuild-tests.yml
19
+ secrets :
20
+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
21
+ decrypt_oracle :
22
+ # Don't run the cron builds on forks
23
+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
24
+ uses : ./.github/workflows/ci_decrypt-oracle.yaml
25
+ static_analysis :
26
+ # Don't run the cron builds on forks
27
+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
28
+ uses : ./.github/workflows/ci_static-analysis.yaml
29
+ test_vector_handler :
30
+ # Don't run the cron builds on forks
31
+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
32
+ uses : ./.github/workflows/ci_test-vector-handler.yaml
33
+ secrets :
34
+ INTEG_AWS_ACCESS_KEY_ID : ${{ secrets.INTEG_AWS_ACCESS_KEY_ID }}
35
+ INTEG_AWS_SECRET_ACCESS_KEY : ${{ secrets.INTEG_AWS_SECRET_ACCESS_KEY }}
36
+ tests :
37
+ # Don't run the cron builds on forks
38
+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
39
+ uses : ./.github/workflows/ci_tests.yaml
Original file line number Diff line number Diff line change
1
+ name : Pull Request Workflow
2
+
3
+ on :
4
+ pull_request :
5
+
6
+ permissions :
7
+ id-token : write
8
+ contents : read
9
+
10
+ jobs :
11
+ # Call each workflow with appropriate parameters
12
+ codebuild_batch :
13
+ uses : ./.github/workflows/ci_codebuild_batch.yml
14
+ secrets :
15
+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
16
+ codebuild_tests :
17
+ uses : ./.github/workflows/ci_codebuild-tests.yml
18
+ secrets :
19
+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
20
+ decrypt_oracle :
21
+ uses : ./.github/workflows/ci_decrypt-oracle.yaml
22
+ static_analysis :
23
+ uses : ./.github/workflows/ci_static-analysis.yaml
24
+ test_vector_handler :
25
+ uses : ./.github/workflows/ci_test-vector-handler.yaml
26
+ secrets :
27
+ INTEG_AWS_ACCESS_KEY_ID : ${{ secrets.INTEG_AWS_ACCESS_KEY_ID }}
28
+ INTEG_AWS_SECRET_ACCESS_KEY : ${{ secrets.INTEG_AWS_SECRET_ACCESS_KEY }}
29
+ tests :
30
+ uses : ./.github/workflows/ci_tests.yaml
31
+ pr-ci-all-required :
32
+ if : always()
33
+ needs :
34
+ - codebuild_batch
35
+ - codebuild_tests
36
+ - decrypt_oracle
37
+ - static_analysis
38
+ - test_vector_handler
39
+ - tests
40
+ runs-on : ubuntu-22.04
41
+ steps :
42
+ - name : Verify all required jobs passed
43
+ uses : re-actors/alls-green@release/v1
44
+ with :
45
+ jobs : ${{ toJSON(needs) }}
Original file line number Diff line number Diff line change
1
+ name : Push Workflow
2
+
3
+ on :
4
+ push :
5
+ branches : master
6
+
7
+ permissions :
8
+ id-token : write
9
+ contents : read
10
+
11
+ jobs :
12
+ # Call each workflow with appropriate parameters
13
+ codebuild_batch :
14
+ uses : ./.github/workflows/ci_codebuild_batch.yml
15
+ secrets :
16
+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
17
+
18
+ codebuild_tests :
19
+ uses : ./.github/workflows/ci_codebuild-tests.yml
20
+ secrets :
21
+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
22
+
23
+ decrypt_oracle :
24
+ uses : ./.github/workflows/ci_decrypt-oracle.yaml
25
+
26
+ static_analysis :
27
+ uses : ./.github/workflows/ci_static-analysis.yaml
28
+
29
+ test_vector_handler :
30
+ uses : ./.github/workflows/ci_test-vector-handler.yaml
31
+ secrets :
32
+ INTEG_AWS_ACCESS_KEY_ID : ${{ secrets.INTEG_AWS_ACCESS_KEY_ID }}
33
+ INTEG_AWS_SECRET_ACCESS_KEY : ${{ secrets.INTEG_AWS_SECRET_ACCESS_KEY }}
34
+
35
+ tests :
36
+ uses : ./.github/workflows/ci_tests.yaml
You can’t perform that action at this time.
0 commit comments