Skip to content

Resolve workflow issues #2877

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rshourou merged 8 commits into from
Jun 23, 2026
Merged

Resolve workflow issues #2877

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
898148d
update github actions to their latest
rshourou Jun 23, 2026
0f493ff
update actions/ in all workflows
rshourou Jun 23, 2026
b46c0bd
add ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true' to docker/login-a…
rshourou Jun 23, 2026
41aaf10
Use full commit SHA hash for docker/login-action
rshourou Jun 23, 2026
c979a61
Merge branch 'develop' into resolve-workflow-issues
rshourou Jun 23, 2026
7709024
force ci retry
rshourou Jun 23, 2026
09ac23f
Merge branch 'resolve-workflow-issues' of https://github.com/bcgov/mo…
rshourou Jun 23, 2026
3ea9f06
add name for the jobs
rshourou Jun 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 9 additions & 3 deletions .github/workflows/build-demo.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,9 @@ jobs:
prime-docman-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down Expand Up @@ -69,7 +71,9 @@ jobs:
prime-backend-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down Expand Up @@ -123,7 +127,9 @@ jobs:
prime-frontend-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down
16 changes: 11 additions & 5 deletions .github/workflows/build-develop.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,11 +31,13 @@ jobs:
prime-docman-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
password: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_PASSWORD}}
password: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_PASSWORD}}

- name: "Build Document Manager image"
run: |
Expand Down Expand Up @@ -69,11 +71,13 @@ jobs:
prime-backend-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
password: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_PASSWORD}}
password: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_PASSWORD}}

- name: "Build .NET web API image"
run: |
Expand Down Expand Up @@ -125,7 +129,9 @@ jobs:
prime-frontend-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down
12 changes: 9 additions & 3 deletions .github/workflows/build-main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,9 @@ jobs:
prime-docman-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down Expand Up @@ -69,7 +71,9 @@ jobs:
prime-backend-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down Expand Up @@ -123,7 +127,9 @@ jobs:
prime-frontend-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down
20 changes: 13 additions & 7 deletions .github/workflows/build-pr.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,223 +12,229 @@
pull_request:
paths-ignore:
- prime-database-backup/**
branches-ignore:
- 'develop'
- 'test'
- 'master'

jobs:
build-document-manager-backend:
name: build-document-manager-backend
runs-on: ubuntu-24.04
environment: Development
steps:
- name: "Checkout the repo"
uses: actions/checkout@v6

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2

- name: Cache Docker layers
uses: actions/cache@v6
with:
path: /tmp/.docman-cache
key: prime-docman-${{ github.sha }}
restore-keys: |
prime-docman-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
password: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_PASSWORD}}

- name: "Get current pull request"
id: PR
uses: 8BitJonny/gh-get-current-pr@2.2.0
with:
github-token: ${{secrets.GITHUB_TOKEN}}
filterOutClosed: true

- name: "Build Document Manager image"
run: |
docker build document-manager/backend/ \
--file document-manager/backend/openshift.dockerfile \
--tag prime-document-manager \
--build-arg BUILD_LOGLEVEL=2 \
--build-arg SVC_NAME=pr-${{steps.PR.outputs.number}}

- name: "Docker tag and push Document Manager image"
run: |
docker tag prime-document-manager ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}/${{secrets.OPENSHIFT_LICENSE_PLATE}}-tools/prime-document-manager:pr-${{steps.PR.outputs.number}}
docker push ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}/${{secrets.OPENSHIFT_LICENSE_PLATE}}-tools/prime-document-manager:pr-${{steps.PR.outputs.number}}

build-backend:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
name: build-backend
runs-on: ubuntu-24.04
environment: Development
steps:
- name: "Checkout the repo"
uses: actions/checkout@v6

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2

- name: Cache Docker layers
uses: actions/cache@v6
with:
path: /tmp/.backend-cache
key: prime-backend-${{ github.sha }}
restore-keys: |
prime-backend-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
password: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_PASSWORD}}

- name: "Get current pull request"
uses: 8BitJonny/gh-get-current-pr@2.2.0
id: PR
with:
github-token: ${{secrets.GITHUB_TOKEN}}
filterOutClosed: true

- name: "Build .NET web API image"
run: |
docker build prime-dotnet-webapi/ \
--file prime-dotnet-webapi/openshift.dockerfile \
--tag prime-webapi-backend \
--build-arg ASPNETCORE_ENVIRONMENT="Development" \
--build-arg ASPNETCORE_HTTPS_PORT=5001 \
--build-arg ASPNETCORE_URLS="http://+:8080" \
--build-arg DB_CONNECTION_STRING="host=pr-${{steps.PR.outputs.number}}-postgres-db;port=5432;database=${{secrets.PRIME_DB_USER}}-${{steps.PR.outputs.number}};username=${{secrets.PRIME_DB_USER}};password=${{secrets.PRIME_DB_PASSWORD}}" \
--build-arg DB_HOST=pr-${{steps.PR.outputs.number}}-postgres-db \
--build-arg DOTNET_CLI_HOME="/tmp/DOTNET_CLI_HOME" \
--build-arg PGPASSWORD=${{secrets.PRIME_DB_PASSWORD}} \
--build-arg POSTGRESQL_ADMIN_PASSWORD=${{secrets.PRIME_DB_PASSWORD}} \
--build-arg POSTGRESQL_DATABASE=${{secrets.PRIME_DB_USER}}-${{steps.PR.outputs.number}} \
--build-arg POSTGRESQL_USERNAME=${{secrets.PRIME_DB_USER}} \
--build-arg SVC_NAME="pr-${{steps.PR.outputs.number}}"

- name: "Docker tag and push .NET web API image"
run: |
docker tag prime-webapi-backend ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}/${{secrets.OPENSHIFT_LICENSE_PLATE}}-tools/prime-webapi-backend:pr-${{steps.PR.outputs.number}}
docker push ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}/${{secrets.OPENSHIFT_LICENSE_PLATE}}-tools/prime-webapi-backend:pr-${{steps.PR.outputs.number}}

build-frontend:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
name: build-frontend
runs-on: ubuntu-latest
environment: Development
defaults:
run:
working-directory: prime-angular-frontend
steps:
- name: "Checkout the repo"
uses: actions/checkout@v6

- uses: actions/setup-node@v6
with:
node-version: '18.20.6'
cache: 'yarn'
cache-dependency-path: prime-angular-frontend/yarn.lock

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2

- name: Cache Docker layers
uses: actions/cache@v6
with:
path: /tmp/.frontend-cache
key: prime-frontend-${{ github.sha }}
restore-keys: |
prime-frontend-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
password: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_PASSWORD}}

- name: "Get current pull request"
uses: 8BitJonny/gh-get-current-pr@2.2.0
id: PR
with:
github-token: ${{secrets.GITHUB_TOKEN}}
filterOutClosed: true

- name: Cache dependencies
uses: actions/cache@v6
with:
path: 'prime-angular-frontend/node_modules'
key: npm-frontend-${{ hashFiles('yarn.lock') }}
restore-keys: npm-frontend-

- name: install yarn
run: npm install -g yarn

- run: yarn global add @angular/compiler-cli@16.2.12
- run: yarn global add @angular/cli@16.2.9

- name: install dependencies
run: yarn

- name: build frontend
run: yarn run build

- name: "Build Angular frontend image"
run: |
docker build . \
--file ci.dockerfile \
--tag prime-angular-frontend

- name: "Docker tag and push Angular frontend image"
run: |
docker tag prime-angular-frontend ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}/${{secrets.OPENSHIFT_LICENSE_PLATE}}-tools/prime-frontend:pr-${{steps.PR.outputs.number}}
docker push ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}/${{secrets.OPENSHIFT_LICENSE_PLATE}}-tools/prime-frontend:pr-${{steps.PR.outputs.number}}

apply-oc-template:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
name: apply-oc-template
runs-on: ubuntu-24.04
environment: Development
needs: [build-document-manager-backend, build-frontend, build-backend]
steps:
- name: "Use the OpenShift template"
uses: actions/checkout@v6

- name: Install OC
uses: redhat-actions/openshift-tools-installer@v1
with:
oc: "4.6"

- name: Authenticate and set context
uses: redhat-actions/oc-login@v1.1
with:
openshift_server_url: ${{secrets.OPENSHIFT_SERVER_URL}}
openshift_token: ${{secrets.OPENSHIFT_SERVICE_TOKEN}}
namespace: ${{secrets.OPENSHIFT_LICENSE_PLATE}}-${{secrets.OPENSHIFT_ENVIRONMENT}}

- name: "Get current pull request"
uses: 8BitJonny/gh-get-current-pr@2.2.0
id: PR
with:
github-token: ${{secrets.GITHUB_TOKEN}}
filterOutClosed: true

- name: "Process template"
id: oc
env:
COMPOSE_DOCKER_CLI_BUILD: 1
DOCKER_BUILDKIT: 1
PR_NUMBER: ${{steps.PR.outputs.number}}
run: |
echo PR_NUMBER=$PR_NUMBER
oc process -f infrastructure/prime-app-ephemeral-template.yml \
-p ASP_ENV=Development \
-p FRONTEND_URL=pr-$PR_NUMBER \
-p IMAGE_TAG=pr-$PR_NUMBER \
-p SVC_NAME=pr-$PR_NUMBER \
-p OC_LICENSE_PLATE=${{secrets.OPENSHIFT_LICENSE_PLATE}} \
-p URL_STUB=.pharmanetenrolment.gov.bc.ca \
-p WEB_PORT=8080 \
-n ${{secrets.OPENSHIFT_LICENSE_PLATE}}-${{secrets.OPENSHIFT_ENVIRONMENT}} | oc apply -n ${{secrets.OPENSHIFT_LICENSE_PLATE}}-${{secrets.OPENSHIFT_ENVIRONMENT}} -f -

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
12 changes: 9 additions & 3 deletions .github/workflows/build-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,9 @@ jobs:
prime-docman-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down Expand Up @@ -69,7 +71,9 @@ jobs:
prime-backend-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down Expand Up @@ -123,7 +127,9 @@ jobs:
prime-frontend-

- name: "Login to OpenShift repository"
uses: docker/login-action@v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
Comment thread
github-advanced-security[bot] marked this conversation as resolved.
Fixed
env:
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: 'true'
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/build-tools.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ jobs:
uses: actions/checkout@v2

- name: "Login to OpenShift repository"
uses: docker/login-action@v1
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down Expand Up @@ -53,7 +53,7 @@ jobs:
uses: actions/checkout@v2

- name: "Login to OpenShift repository"
uses: docker/login-action@v1
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down Expand Up @@ -99,7 +99,7 @@ jobs:
uses: actions/checkout@v2

- name: "Login to OpenShift repository"
uses: docker/login-action@v1
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
with:
registry: ${{secrets.OPENSHIFT_IMAGE_REPOSITORY}}
username: ${{secrets.OPENSHIFT_TOOLS_SERVICE_ACCOUNT_USERNAME}}
Expand Down
Loading