products/.github/workflows/docs-mcp-ci.yml at 26f204ebb5467accf3dadacf7edd35ebed82298a · DuendeSoftware/products · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
# This was generated by tool. Edits will be overwritten.

name: docs-mcp/ci
on:
  workflow_dispatch:
  push:
    paths:
    - .config/dotnet-tools.json
    - .github/workflows/docs-mcp-**
    - docs-mcp/**
    - .editorconfig
    - Directory.Packages.props
    - global.json
    - src.props
    - test.props
  pull_request:
    paths:
    - .config/dotnet-tools.json
    - .github/workflows/docs-mcp-**
    - docs-mcp/**
    - .editorconfig
    - Directory.Packages.props
    - global.json
    - src.props
    - test.props
env:
  DOTNET_NOLOGO: true
  DOTNET_CLI_TELEMETRY_OPTOUT: true
jobs:
  verify-formatting:
    name: Verify formatting
    if: (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository) || (github.event_name == 'push') || (github.event_name == 'workflow_dispatch')
    runs-on:
      group: large
      labels: [ubuntu-latest-x64-16core]
    permissions:
      contents: read
    defaults:
      run:
        shell: bash
        working-directory: docs-mcp
    timeout-minutes: 15
    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
    - name: List .net sdks
      run: dotnet --list-sdks
    - name: Setup Dotnet
      uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25
      with:
        dotnet-version: |-
          8.0.x
          9.0.203
          10.0.200
    - name: Restore
      run: dotnet restore docs-mcp.slnf
    - name: Verify Formatting
      run: dotnet format docs-mcp.slnf --verify-no-changes --no-restore
  build:
    name: Build and test (unit)
    if: (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository) || (github.event_name == 'push') || (github.event_name == 'workflow_dispatch')
    runs-on:
      group: large
      labels: [ubuntu-latest-x64-16core]
    permissions:
      actions: read
      checks: write
      contents: read
      packages: write
    defaults:
      run:
        shell: bash
        working-directory: docs-mcp
    timeout-minutes: 15
    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
    - name: List .net sdks
      run: dotnet --list-sdks
    - name: Setup Dotnet
      uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25
      with:
        dotnet-version: |-
          8.0.x
          9.0.203
          10.0.200
    - name: Restore
      run: dotnet restore docs-mcp.slnf
    - name: Build
      run: dotnet build docs-mcp.slnf --no-restore -c Release
    - name: Dotnet devcerts
      run: SSL_CERT_DIR=$HOME/.aspnet/dev-certs/trust dotnet dev-certs https --trust
  playwright:
    name: Playwright tests
    if: (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository) || (github.event_name == 'push') || (github.event_name == 'workflow_dispatch')
    runs-on:
      group: large
      labels: [ubuntu-latest-x64-16core]
    permissions:
      actions: read
      checks: write
      contents: read
    defaults:
      run:
        shell: bash
        working-directory: docs-mcp
    timeout-minutes: 15
    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
  codeql:
    name: CodeQL analyze
    if: (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository) || (github.event_name == 'push') || (github.event_name == 'workflow_dispatch')
    runs-on:
      group: large
      labels: [ubuntu-latest-x64-16core]
    defaults:
      run:
        shell: bash
        working-directory: docs-mcp
    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
  pack:
    name: Pack, sign and push
    if: (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository) || (github.event_name == 'push') || (github.event_name == 'workflow_dispatch')
    needs:
    - verify-formatting
    - build
    - playwright
    - codeql
    runs-on:
      group: large
      labels: [ubuntu-latest-x64-16core]
    permissions:
      actions: read
      contents: read
      packages: write
    defaults:
      run:
        shell: bash
        working-directory: docs-mcp
    timeout-minutes: 15
    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
    - name: List .net sdks
      run: dotnet --list-sdks
    - name: Setup Dotnet
      uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25
      with:
        dotnet-version: |-
          8.0.x
          9.0.203
          10.0.200
    - name: Tool restore
      run: dotnet tool restore
    - name: Pack docs-mcp.slnf
      run: dotnet pack -c Release docs-mcp.slnf -o artifacts
    - name: Sign packages
      if: github.event == 'push'
      run: |-
        for file in artifacts/*.nupkg; do
           dotnet NuGetKeyVaultSignTool sign "$file" --file-digest sha256 --timestamp-rfc3161 http://timestamp.digicert.com --azure-key-vault-url https://duendecodesigninghsm.vault.azure.net/ --azure-key-vault-client-id 18e3de68-2556-4345-8076-a46fad79e474 --azure-key-vault-tenant-id ed3089f0-5401-4758-90eb-066124e2d907 --azure-key-vault-client-secret ${{ secrets.SignClientSecret }} --azure-key-vault-certificate NuGetPackageSigning
        done
    - name: Push packages to GitHub
      if: github.ref == 'refs/heads/main'
      run: dotnet nuget push artifacts/*.nupkg --source https://nuget.pkg.github.com/DuendeSoftware/index.json --api-key ${{ secrets.GITHUB_TOKEN }} --skip-duplicate
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        NUGET_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    - name: Upload Artifacts
      if: github.ref == 'refs/heads/main'
      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
      with:
        name: artifacts
        path: docs-mcp/artifacts/*.nupkg
        overwrite: true
        retention-days: 15