rustls-platform-verifier/.github/workflows/cert-update.yml at 97427830c6e82ab23c665616b064127e8611f5f1 · cpu/rustls-platform-verifier · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
on:
  workflow_dispatch:
  schedule:
    # Run on wednesdays at 12:10 UTC
    - cron:  '10 12 * * 3'

name: cert-update
permissions:
  contents: read

jobs:
  test-cert-update:
    name: Update test certificates
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
      - name: Check out code
        uses: actions/checkout@v3
        with:
          persist-credentials: false

      # Note: presently need Rust nightly to use the Cargo scripting feature.
      - name: Install Rust nightly
        uses: dtolnay/rust-toolchain@nightly

      - name: Run update script
        run: src/tests/verification_real_world/update_valid_ee_certs.rs

      - name: Create pull-request
        id: cpr
        uses: peter-evans/create-pull-request@v4
        with:
          commit-message: "tests: update verification_real_world test certificates"
          title: "tests: update verification_real_world test certificates"
          body: ":robot: This PR was automatically generated by the cert-update workflow."
          committer: "GitHub <noreply@github.com>"
          author: "GitHub <noreply@github.com>"
          branch: test-cert-update
          branch-suffix: timestamp
          delete-branch: true

      - name: Check outputs
        run: |
          echo "Pull Request Number - ${{ steps.cpr.outputs.pull-request-number }}"
          echo "Pull Request URL - ${{ steps.cpr.outputs.pull-request-url }}"