8294d6ee49
- Created `qa-test-output-after-fix.txt` and `qa-test-output.txt` to log results of certificate page authentication tests. - Added `build.sh` for deterministic backend builds in CI, utilizing `go list` for efficiency. - Introduced `codeql_scan.sh` for CodeQL database creation and analysis for Go and JavaScript/TypeScript. - Implemented `dockerfile_check.sh` to validate Dockerfiles for base image and package manager mismatches. - Added `sourcery_precommit_wrapper.sh` to facilitate Sourcery CLI usage in pre-commit hooks.
49 lines
1.5 KiB
YAML
49 lines
1.5 KiB
YAML
name: Renovate
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '0 5 * * *' # daily 05:00 EST
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: write
|
|
pull-requests: write
|
|
issues: write
|
|
|
|
jobs:
|
|
renovate:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
|
|
with:
|
|
fetch-depth: 1
|
|
- name: Choose Renovate Token
|
|
run: |
|
|
# Prefer explicit tokens (CHARON_TOKEN > CPMP_TOKEN) if provided; otherwise use the default GITHUB_TOKEN
|
|
if [ -n "${{ secrets.CHARON_TOKEN }}" ]; then
|
|
echo "Using CHARON_TOKEN" >&2
|
|
echo "GITHUB_TOKEN=${{ secrets.CHARON_TOKEN }}" >> $GITHUB_ENV
|
|
elif [ -n "${{ secrets.CPMP_TOKEN }}" ]; then
|
|
echo "Using CPMP_TOKEN fallback" >&2
|
|
echo "GITHUB_TOKEN=${{ secrets.CPMP_TOKEN }}" >> $GITHUB_ENV
|
|
else
|
|
echo "Using default GITHUB_TOKEN from Actions" >&2
|
|
echo "GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}" >> $GITHUB_ENV
|
|
fi
|
|
|
|
- name: Fail-fast if token not set
|
|
run: |
|
|
if [ -z "${{ env.GITHUB_TOKEN }}" ]; then
|
|
echo "ERROR: No Renovate token provided. Set CHARON_TOKEN, CPMP_TOKEN, or rely on default GITHUB_TOKEN." >&2
|
|
exit 1
|
|
fi
|
|
|
|
- name: Run Renovate
|
|
uses: renovatebot/github-action@5712c6a41dea6cdf32c72d92a763bd417e6606aa # v44.0.5
|
|
with:
|
|
configurationFile: .github/renovate.json
|
|
token: ${{ env.GITHUB_TOKEN }}
|
|
env:
|
|
LOG_LEVEL: info
|