label-studio/.github/workflows/cicd_pipeline_develop.yml at 29bd8b2f0600f9bb09b99a5e4b32588d3cdf082f · HumanSignal/label-studio · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
name: "CI/CD Pipeline Develop"

on:
  push:
    branches:
      - develop

concurrency:
  group: "CI/CD Pipeline-develop"
  cancel-in-progress: false

jobs:
  gitleaks:
    name: "Linter"
    uses: ./.github/workflows/gitleaks.yml
    with:
      head_sha: ${{ github.sha }}
      base_sha: ${{ github.event.pull_request.base.sha || github.event.before }}

  bandit:
    name: "Linter"
    uses: ./.github/workflows/bandit.yml
    with:
      head_sha: ${{ github.event.pull_request.head.sha || github.event.after }}

  ruff:
    name: "Linter"
    uses: ./.github/workflows/ruff.yml
    with:
      head_sha: ${{ github.event.pull_request.head.sha || github.event.after }}

  biome:
    name: "Linter"
    uses: ./.github/workflows/biome.yml
    with:
      head_sha: ${{ github.event.pull_request.head.sha || github.event.after }}

  build-docker:
    name: "Build"
    permissions:
      contents: read
      checks: write
    uses: ./.github/workflows/docker-build.yml
    with:
      sha: ${{ github.event.pull_request.head.sha || github.event.after }}
      branch_name: ${{ github.event.pull_request.head.ref || github.ref_name }}
    secrets: inherit

  deploy:
    name: "Deploy"
    runs-on: ubuntu-latest
    needs:
      - build-docker
    steps:
      - uses: actions/github-script@v8
        env:
          DOCKER_IMAGE_VERSION: ${{ needs.build-docker.outputs.build_version }}
          RELEASE_NAME: 'ls-develop'
        with:
          github-token: ${{ secrets.GIT_PAT }}
          script: |
            const docker_image_version = process.env.DOCKER_IMAGE_VERSION;
            const release_name = process.env.RELEASE_NAME;
            github.rest.actions.createWorkflowDispatch({
              owner: "HumanSignal",
              repo: "label-studio-enterprise",
              workflow_id: "argocd-deploy.yml",
              ref: "develop",
              inputs: {
                docker_image_version: docker_image_version,
                release_name: release_name,
                template_name: "lso",
              }
            });

  pytest:
    name: "Tests"
    uses: ./.github/workflows/tests.yml
    with:
      head_sha: ${{ github.event.pull_request.head.sha || github.event.after }}
    secrets: inherit

  migrations:
    name: "Tests"
    uses: ./.github/workflows/test_migrations.yml
    with:
      head_sha: ${{ github.event.pull_request.head.sha || github.event.after }}
    secrets: inherit

  conda-test:
    name: "Tests"
    uses: ./.github/workflows/test_conda.yml
    with:
      head_sha: ${{ github.event.pull_request.head.sha || github.event.after }}
    secrets: inherit

  tests-yarn-unit:
    name: "Tests"
    uses: ./.github/workflows/tests-yarn-unit.yml
    with:
      head_sha: ${{ github.event.pull_request.head.sha || github.event.after }}
    secrets: inherit

  tests-yarn-lsf:
    name: "Tests"
    uses: ./.github/workflows/tests-yarn-lsf.yml
    with:
      head_sha: ${{ github.event.pull_request.head.sha || github.event.after }}
    secrets: inherit

  check_gate:
    name: "Ready to ship"
    if: always()
    needs:
      - gitleaks
      - bandit
      - ruff
      - biome
      - pytest
      - migrations
      - build-docker
      - tests-yarn-unit
      - tests-yarn-lsf
    runs-on: ubuntu-latest
    steps:
      - name: Decide whether the needed jobs succeeded or failed
        uses: re-actors/alls-green@release/v1
        with:
          allowed-skips: gitleaks, bandit, ruff, biome, pytest, migrations, conda-test, build-docker, tests-yarn-unit, tests-yarn-lsf
          jobs: ${{ toJSON(needs) }}