Skip to content

Commit d5ed768

Browse files
alponsirenasalponsirenas
authored
Updates permissions, secrets, and pins to action SHA (open-edge-platform#126)
1 parent 8715722 commit d5ed768

File tree

3 files changed

+118
-37
lines changed

3 files changed

+118
-37
lines changed

‎.github/workflows/post-merge.yml‎

Lines changed: 60 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,11 @@ on: # yamllint disable-line rule:truthy
1111
- release-*
1212
workflow_dispatch:
1313

14+
permissions:
15+
contents: read # needed for actions/checkout
16+
pull-requests: read # needed for gh pr list
17+
issues: write # needed to post PR comment
18+
1419
jobs:
1520
filter:
1621
runs-on: ubuntu-latest
@@ -21,6 +26,7 @@ jobs:
2126
object-store_changed: ${{ steps.filter.outputs.object-store }}
2227
chat-question-and-answer_changed: ${{ steps.filter.outputs.chat-question-and-answer }}
2328
visual-pipeline-platform-tool_changed: ${{ steps.filter.outputs.visual-pipeline-platform-tool }}
29+
chat-question-and-answer-core_changed: ${{ steps.filter.outputs.chat-question-and-answer-core }}
2430
steps:
2531
- uses: actions/checkout@v4
2632
- name: Set paths filter
@@ -40,40 +46,76 @@ jobs:
4046
- 'sample-applications/chat-question-and-answer/docs**'
4147
visual-pipeline-platform-tool:
4248
- 'tools/visual-pipeline-and-platform-evaluation-tool/docs**'
49+
chat-question-and-answer-core:
50+
- 'sample-applications/chat-question-and-answer-core/docs**'
4351
4452
build_dlstreamer-pipeline-server:
45-
if: ${{ (github.event.inputs.target == 'dlstreamer-pipeline-server') || (github.event.inputs.target == 'all-documentation') }}
46-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
47-
secrets: inherit
53+
needs: filter
54+
if: ${{ needs.filter.outputs.dlstreamer-pipeline-server_changed == 'true' }}
55+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
56+
secrets:
57+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
58+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
59+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
4860
with:
4961
docs_directory: microservices/dlstreamer-pipeline-server
5062
build_document-ingestion:
51-
if: ${{ (github.event.inputs.target == 'document-ingestion') || (github.event.inputs.target == 'all-documentation') }}
52-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
53-
secrets: inherit
63+
needs: filter
64+
if: ${{ needs.filter.outputs.document-ingestion_changed == 'true' }}
65+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
66+
secrets:
67+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
68+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
69+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
5470
with:
5571
docs_directory: microservices/document-ingestion
5672
build_model-registry:
57-
if: ${{ (github.event.inputs.target == 'model-registry') || (github.event.inputs.target == 'all-documentation') }}
58-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
59-
secrets: inherit
73+
needs: filter
74+
if: ${{ needs.filter.outputs.model-registry_changed == 'true' }}
75+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
76+
secrets:
77+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
78+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
79+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
6080
with:
6181
docs_directory: microservices/model-registry
6282
build_object-store:
63-
if: ${{ (github.event.inputs.target == 'object-store') || (github.event.inputs.target == 'all-documentation') }}
64-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
65-
secrets: inherit
83+
needs: filter
84+
if: ${{ needs.filter.outputs.object-store_changed == 'true' }}
85+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
86+
secrets:
87+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
88+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
89+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
6690
with:
6791
docs_directory: microservices/object-store
6892
build_chat-question-and-answer:
69-
if: ${{ (github.event.inputs.target == 'chat-question-and-answer') || (github.event.inputs.target == 'all-documentation') }}
70-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
71-
secrets: inherit
93+
needs: filter
94+
if: ${{ needs.filter.outputs.chat-question-and-answer_changed == 'true' }}
95+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
96+
secrets:
97+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
98+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
99+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
72100
with:
73101
docs_directory: sample-applications/chat-question-and-answer
74102
build_visual-pipeline-platform-tool:
75-
if: ${{ (github.event.inputs.target == 'visual-pipeline-platform-tool') || (github.event.inputs.target == 'all-documentation') }}
76-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
77-
secrets: inherit
103+
needs: filter
104+
if: ${{ needs.filter.outputs.visual-pipeline-platform-tool_changed == 'true' }}
105+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
106+
secrets:
107+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
108+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
109+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
78110
with:
79111
docs_directory: tools/visual-pipeline-and-platform-evaluation-tool
112+
build_chat-question-and-answer-core:
113+
needs: filter
114+
if: ${{ needs.filter.outputs.chat-question-and-answer-core_changed == 'true' }}
115+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
116+
secrets:
117+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
118+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
119+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
120+
with:
121+
docs_directory: sample-applications/chat-question-and-answer-core

‎.github/workflows/pre-merge.yml‎

Lines changed: 46 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,9 @@ on: # yamllint disable-line rule:truthy
1111
- release-*
1212
workflow_dispatch:
1313

14+
permissions:
15+
contents: read # needed for actions/checkout
16+
1417
jobs:
1518
filter:
1619
runs-on: ubuntu-latest
@@ -21,6 +24,7 @@ jobs:
2124
object-store_changed: ${{ steps.filter.outputs.object-store }}
2225
chat-question-and-answer_changed: ${{ steps.filter.outputs.chat-question-and-answer }}
2326
visual-pipeline-platform-tool_changed: ${{ steps.filter.outputs.visual-pipeline-platform-tool }}
27+
chat-question-and-answer-core_changed: ${{ steps.filter.outputs.chat-question-and-answer-core }}
2428
steps:
2529
- uses: actions/checkout@v4
2630
- name: Set paths filter
@@ -40,46 +44,76 @@ jobs:
4044
- 'sample-applications/chat-question-and-answer/docs**'
4145
visual-pipeline-platform-tool:
4246
- 'tools/visual-pipeline-and-platform-evaluation-tool/docs**'
47+
chat-question-and-answer-core:
48+
- 'sample-applications/chat-question-and-answer-core/docs**'
4349
build_dlstreamer-pipeline-server:
4450
needs: filter
4551
if: ${{ needs.filter.outputs.dlstreamer-pipeline-server_changed == 'true' }}
46-
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@main
47-
secrets: inherit
52+
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
53+
secrets:
54+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
55+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
56+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
4857
with:
4958
docs_directory: microservices/dlstreamer-pipeline-server
5059
build_document-ingestion:
5160
needs: filter
5261
if: ${{ needs.filter.outputs.document-ingestion_changed == 'true' }}
53-
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@main
54-
secrets: inherit
62+
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
63+
secrets:
64+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
65+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
66+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
5567
with:
5668
docs_directory: microservices/document-ingestion
5769
build_model-registry:
5870
needs: filter
5971
if: ${{ needs.filter.outputs.model-registry_changed == 'true' }}
60-
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@main
61-
secrets: inherit
72+
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
73+
secrets:
74+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
75+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
76+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
6277
with:
6378
docs_directory: microservices/model-registry
6479
build_object-store:
6580
needs: filter
6681
if: ${{ needs.filter.outputs.object-store_changed == 'true' }}
67-
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@main
68-
secrets: inherit
82+
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
83+
secrets:
84+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
85+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
86+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
6987
with:
7088
docs_directory: microservices/object-store
7189
build_chat-question-and-answer:
7290
needs: filter
7391
if: ${{ needs.filter.outputs.chat-question-and-answer_changed == 'true' }}
74-
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@main
75-
secrets: inherit
92+
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
93+
secrets:
94+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
95+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
96+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
7697
with:
7798
docs_directory: sample-applications/chat-question-and-answer
7899
build_visual-pipeline-platform-tool:
79100
needs: filter
80101
if: ${{ needs.filter.outputs.visual-pipeline-platform-tool_changed == 'true' }}
81-
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@main
82-
secrets: inherit
102+
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
103+
secrets:
104+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
105+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
106+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
83107
with:
84108
docs_directory: tools/visual-pipeline-and-platform-evaluation-tool
109+
build_chat-question-and-answer-core:
110+
needs: filter
111+
if: ${{ needs.filter.outputs.chat-question-and-answer-core_changed == 'true' }}
112+
uses: open-edge-platform/orch-ci/.github/workflows/build-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
113+
secrets:
114+
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
115+
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
116+
DOC_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOC_AWS_SECRET_ACCESS_KEY }}
117+
with:
118+
docs_directory: sample-applications/chat-question-and-answer-core
85119

‎.github/workflows/publish-docs.yml‎

Lines changed: 12 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -16,10 +16,15 @@ on:
1616
- visual-pipeline-platform-tool
1717
- chat-question-and-answer-core
1818

19+
permissions:
20+
contents: read # needed for actions/checkout
21+
pull-requests: read # needed for gh pr list
22+
issues: write # needed to post PR comment
23+
1924
jobs:
2025
build_dlstreamer-pipeline-server:
2126
if: ${{ (github.event.inputs.target == 'dlstreamer-pipeline-server') || (github.event.inputs.target == 'all-documentation') }}
22-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
27+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
2328
secrets:
2429
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
2530
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
@@ -28,7 +33,7 @@ jobs:
2833
docs_directory: microservices/dlstreamer-pipeline-server
2934
build_document-ingestion:
3035
if: ${{ (github.event.inputs.target == 'document-ingestion') || (github.event.inputs.target == 'all-documentation') }}
31-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
36+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
3237
secrets:
3338
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
3439
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
@@ -37,7 +42,7 @@ jobs:
3742
docs_directory: microservices/document-ingestion
3843
build_model-registry:
3944
if: ${{ (github.event.inputs.target == 'model-registry') || (github.event.inputs.target == 'all-documentation') }}
40-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
45+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
4146
secrets:
4247
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
4348
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
@@ -46,7 +51,7 @@ jobs:
4651
docs_directory: microservices/model-registry
4752
build_object-store:
4853
if: ${{ (github.event.inputs.target == 'object-store') || (github.event.inputs.target == 'all-documentation') }}
49-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
54+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
5055
secrets:
5156
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
5257
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
@@ -55,7 +60,7 @@ jobs:
5560
docs_directory: microservices/object-store
5661
build_chat-question-and-answer:
5762
if: ${{ (github.event.inputs.target == 'chat-question-and-answer') || (github.event.inputs.target == 'all-documentation') }}
58-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
63+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
5964
secrets:
6065
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
6166
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
@@ -64,7 +69,7 @@ jobs:
6469
docs_directory: sample-applications/chat-question-and-answer
6570
build_visual-pipeline-platform-tool:
6671
if: ${{ (github.event.inputs.target == 'visual-pipeline-platform-tool') || (github.event.inputs.target == 'all-documentation') }}
67-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
72+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
6873
secrets:
6974
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
7075
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}
@@ -73,7 +78,7 @@ jobs:
7378
docs_directory: tools/visual-pipeline-and-platform-evaluation-tool
7479
build_chat-question-and-answer-core:
7580
if: ${{ (github.event.inputs.target == 'chat-question-and-answer-core') || (github.event.inputs.target == 'all-documentation') }}
76-
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@main
81+
uses: open-edge-platform/orch-ci/.github/workflows/publish-documentation.yml@734970a73e3d6e8d7cd160e2cad6366770f52403
7782
secrets:
7883
SYS_ORCH_GITHUB: ${{ secrets.SYS_ORCH_GITHUB }}
7984
DOC_AWS_ACCESS_KEY_ID: ${{ secrets.DOC_AWS_ACCESS_KEY_ID }}

0 commit comments

Comments
 (0)