File tree Expand file tree Collapse file tree 9 files changed +141
-25
lines changed Expand file tree Collapse file tree 9 files changed +141
-25
lines changed Original file line number Diff line number Diff line change 66 # Run once a day
77 schedule :
88 - cron : " 0 0 * * *"
9+ # Add workflow_call trigger
10+ workflow_call :
11+ # Define any secrets that need to be passed from the caller
12+ secrets :
13+ CI_AWS_ROLE_ARN :
14+ required : true
915
1016permissions :
1117 id-token : write
Original file line number Diff line number Diff line change 11name : AWS CodeBuild Batch Workflow
22
33on :
4- pull_request :
5- push :
6- # Run once a day
7- schedule :
8- - cron : " 0 0 * * * "
4+ workflow_call :
5+ # Define any secrets that need to be passed from the caller
6+ secrets :
7+ CI_AWS_ROLE_ARN :
8+ required : true
99
1010permissions :
1111 id-token : write
Original file line number Diff line number Diff line change 11name : Continuous Integration tests for the decrypt oracle
22
33on :
4- pull_request :
5- push :
6- # Run once a day
7- schedule :
8- - cron : ' 0 0 * * *'
4+ workflow_call :
95
106jobs :
117 tests :
Original file line number Diff line number Diff line change 11name : Static analysis checks
22
33on :
4- pull_request :
5- push :
6- # Run once a day
7- schedule :
8- - cron : ' 0 0 * * *'
4+ workflow_call :
95
106jobs :
117 analysis :
Original file line number Diff line number Diff line change 11name : Continuous Integration tests for the test vector handler
22
33on :
4- pull_request :
5- push :
6- # Run once a day
7- schedule :
8- - cron : ' 0 0 * * *'
4+ workflow_call :
5+ # Define any secrets that need to be passed from the caller
6+ secrets :
7+ INTEG_AWS_ACCESS_KEY_ID :
8+ required : true
9+ INTEG_AWS_SECRET_ACCESS_KEY :
10+ required : true
911
1012jobs :
1113 tests :
Original file line number Diff line number Diff line change 11name : Continuous Integration tests
22
33on :
4- pull_request :
5- push :
6- # Run once a day
7- schedule :
8- - cron : ' 0 0 * * *'
4+ workflow_call :
95
106env :
117 AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID : |
Original file line number Diff line number Diff line change 1+ # This workflow runs every weekday at 15:00 UTC (8AM PDT)
2+ name : Daily CI
3+
4+ on :
5+ schedule :
6+ - cron : " 00 15 * * 1-5"
7+
8+ jobs :
9+ codebuild_batch :
10+ # Don't run the cron builds on forks
11+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
12+ uses : ./.github/workflows/ci_codebuild_batch.yml
13+ secrets :
14+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
15+ codebuild_tests :
16+ # Don't run the cron builds on forks
17+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
18+ uses : ./.github/workflows/ci_codebuild-tests.yml
19+ secrets :
20+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
21+ decrypt_oracle :
22+ # Don't run the cron builds on forks
23+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
24+ uses : ./.github/workflows/ci_decrypt-oracle.yaml
25+ static_analysis :
26+ # Don't run the cron builds on forks
27+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
28+ uses : ./.github/workflows/ci_static-analysis.yaml
29+ test_vector_handler :
30+ # Don't run the cron builds on forks
31+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
32+ uses : ./.github/workflows/ci_test-vector-handler.yaml
33+ secrets :
34+ INTEG_AWS_ACCESS_KEY_ID : ${{ secrets.INTEG_AWS_ACCESS_KEY_ID }}
35+ INTEG_AWS_SECRET_ACCESS_KEY : ${{ secrets.INTEG_AWS_SECRET_ACCESS_KEY }}
36+ tests :
37+ # Don't run the cron builds on forks
38+ if : github.event_name != 'schedule' || github.repository_owner == 'aws'
39+ uses : ./.github/workflows/ci_tests.yaml
Original file line number Diff line number Diff line change 1+ name : Pull Request Workflow
2+
3+ on :
4+ pull_request :
5+
6+ permissions :
7+ id-token : write
8+ contents : read
9+
10+ jobs :
11+ # Call each workflow with appropriate parameters
12+ codebuild_batch :
13+ uses : ./.github/workflows/ci_codebuild_batch.yml
14+ secrets :
15+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
16+ codebuild_tests :
17+ uses : ./.github/workflows/ci_codebuild-tests.yml
18+ secrets :
19+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
20+ decrypt_oracle :
21+ uses : ./.github/workflows/ci_decrypt-oracle.yaml
22+ static_analysis :
23+ uses : ./.github/workflows/ci_static-analysis.yaml
24+ test_vector_handler :
25+ uses : ./.github/workflows/ci_test-vector-handler.yaml
26+ secrets :
27+ INTEG_AWS_ACCESS_KEY_ID : ${{ secrets.INTEG_AWS_ACCESS_KEY_ID }}
28+ INTEG_AWS_SECRET_ACCESS_KEY : ${{ secrets.INTEG_AWS_SECRET_ACCESS_KEY }}
29+ tests :
30+ uses : ./.github/workflows/ci_tests.yaml
31+ pr-ci-all-required :
32+ if : always()
33+ needs :
34+ - codebuild_batch
35+ - codebuild_tests
36+ - decrypt_oracle
37+ - static_analysis
38+ - test_vector_handler
39+ - tests
40+ runs-on : ubuntu-22.04
41+ steps :
42+ - name : Verify all required jobs passed
43+ uses : re-actors/alls-green@release/v1
44+ with :
45+ jobs : ${{ toJSON(needs) }}
Original file line number Diff line number Diff line change 1+ name : Push Workflow
2+
3+ on :
4+ push :
5+ branches : master
6+
7+ permissions :
8+ id-token : write
9+ contents : read
10+
11+ jobs :
12+ # Call each workflow with appropriate parameters
13+ codebuild_batch :
14+ uses : ./.github/workflows/ci_codebuild_batch.yml
15+ secrets :
16+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
17+
18+ codebuild_tests :
19+ uses : ./.github/workflows/ci_codebuild-tests.yml
20+ secrets :
21+ CI_AWS_ROLE_ARN : ${{ secrets.CI_AWS_ROLE_ARN }}
22+
23+ decrypt_oracle :
24+ uses : ./.github/workflows/ci_decrypt-oracle.yaml
25+
26+ static_analysis :
27+ uses : ./.github/workflows/ci_static-analysis.yaml
28+
29+ test_vector_handler :
30+ uses : ./.github/workflows/ci_test-vector-handler.yaml
31+ secrets :
32+ INTEG_AWS_ACCESS_KEY_ID : ${{ secrets.INTEG_AWS_ACCESS_KEY_ID }}
33+ INTEG_AWS_SECRET_ACCESS_KEY : ${{ secrets.INTEG_AWS_SECRET_ACCESS_KEY }}
34+
35+ tests :
36+ uses : ./.github/workflows/ci_tests.yaml
You can’t perform that action at this time.
0 commit comments