mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-10-26 21:47:47 +00:00
dependabot[bot]
abd8994261
Bumps the all-actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action), [anchore/sbom-action](https://github.com/anchore/sbom-action) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release). Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `docker/setup-qemu-action` from 4.2.0 to 4.3.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/96fe6ef7f33517b61c61be40b68a1882f3264fb8...1f40c72289eff860ee54a304f1438e3cff362e0a) Updates `anchore/sbom-action` from 0.24.0 to 0.24.2 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/sbom-action/compare/e22c389904149dbc22b58101806040fa8d37a610...3ad7283483fc7af8ff2b4ea19663c2d5ca935e26) Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/3d0d9888cb7fd7b750713d6e236d1fcb99157228...efb35369e0ad2afab669f228072c1b0d510eae64) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: docker/setup-qemu-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: anchore/sbom-action dependency-version: 0.24.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
62 lines
2.3 KiB
YAML
62 lines
2.3 KiB
YAML
name: Catalog Drift Check
|
|
|
|
on:
|
|
pull_request:
|
|
branches: [main]
|
|
paths:
|
|
- 'docs/feature-catalog.yaml'
|
|
- 'scripts/website-catalog/**'
|
|
- '.github/workflows/catalog-drift.yml'
|
|
push:
|
|
branches: [main]
|
|
paths:
|
|
- 'docs/feature-catalog.yaml'
|
|
- 'scripts/website-catalog/**'
|
|
# Drift can also be introduced from the website side, which changes nothing
|
|
# in this repository and so triggers none of the filters above. Check daily
|
|
# so an edited or reverted snapshot cannot sit undetected.
|
|
schedule:
|
|
- cron: '17 6 * * *'
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
verify:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
# Mint a read-only installation token scoped to the website repository
|
|
# only. The default GITHUB_TOKEN cannot read Studio-Saelix/sencho-website.
|
|
- name: Generate GitHub App installation token
|
|
id: app-token
|
|
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
|
|
with:
|
|
app-id: ${{ secrets.APP_ID }}
|
|
private-key: ${{ secrets.APP_PRIVATE_KEY }}
|
|
owner: ${{ github.repository_owner }}
|
|
repositories: sencho-website
|
|
permission-contents: read
|
|
|
|
# The root checkout must come first. actions/checkout cleans its
|
|
# destination, so running it after the nested one deletes website-checkout.
|
|
- uses: actions/checkout@v7
|
|
|
|
- uses: actions/checkout@v7
|
|
with:
|
|
repository: ${{ github.repository_owner }}/sencho-website
|
|
token: ${{ steps.app-token.outputs.token }}
|
|
path: website-checkout
|
|
- name: Install root dependencies
|
|
run: npm ci
|
|
- name: Canonical validation
|
|
run: node scripts/website-catalog/canonical-validate.mjs
|
|
# Compare the canonical catalog against the snapshot the website has
|
|
# actually committed. Do not run sync-feature-catalog here: it rewrites
|
|
# that snapshot from the canonical file, so the comparison would only
|
|
# ever read back what it just wrote and could never report drift.
|
|
- name: Compare against the committed website snapshot
|
|
run: node scripts/website-catalog/check-website-drift.mjs --website-dir website-checkout
|
|
- name: Verify no internal identifiers in canonical file
|
|
run: node scripts/website-catalog/test-catalog-no-leak.mjs
|