Generate artifacts - PR #10085 - by @yisding #2230
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Maintenance: Build artifacts" | |
| run-name: "Generate artifacts - PR #${{ github.event.pull_request.number }} - by @${{ github.actor }}" | |
| # | |
| # If PR is labeled with "Build" and you are a member of "Release manager" team it will start a build train (additional security feature). | |
| # In the run name, ${{ github.actor }} shows who's privileges are used for this run. | |
| # | |
| on: pull_request_target | |
| jobs: | |
| Check: | |
| # Self-hosted runner labelled `Linux` only exists in the armbian/build | |
| # infrastructure; in forks the job would otherwise sit queued forever | |
| # and show as a pending check on every PR. | |
| if: ${{ github.repository_owner == 'armbian' }} | |
| permissions: | |
| pull-requests: read | |
| name: Check label and authorization | |
| runs-on: Linux | |
| outputs: | |
| member: ${{ steps.checkUserMember.outputs.isTeamMember }} | |
| steps: | |
| - uses: tspascoal/get-user-teams-membership@b2546c5affc730fd8e3d8483ae9ad3621938c2f9 # v4.0.2 | |
| if: contains(github.event.pull_request.labels.*.name, 'Build') | |
| id: checkUserMember | |
| with: | |
| username: ${{ github.actor }} | |
| organization: armbian | |
| team: "Release manager" | |
| GITHUB_TOKEN: ${{ secrets.ORG_MEMBERS }} | |
| Compile: | |
| needs: Check | |
| name: Generate artifacts | |
| concurrency: | |
| group: pipeline-pr-${{github.event.pull_request.number}} | |
| cancel-in-progress: true | |
| if: ${{ github.repository_owner == 'armbian' && needs.Check.outputs.member == 'true' }} | |
| uses: armbian/os/.github/workflows/complete-artifact-matrix-all.yml@main | |
| secrets: | |
| ORG_MEMBERS: ${{ secrets.ORG_MEMBERS }} | |
| with: | |
| extraParamsAllBuilds: "UPLOAD_TO_OCI_ONLY=no" | |
| ref: ${{ github.event.pull_request.head.sha }} |