cluster-api-provider-intel/.github/workflows/pre-merge.yml at 717015d645a61fd36e63b1b2f21e6da02cb5a37b · open-edge-platform/cluster-api-provider-intel · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
# SPDX-FileCopyrightText: (C) 2025 Intel Corporation
# SPDX-License-Identifier: Apache-2.0

---

name: Pre-Merge CI Pipeline

on:
  pull_request:
    branches:
      - main
      - release-*
  workflow_dispatch:

permissions:
  contents: read

jobs:
  lint:
    permissions:
      contents: read
    runs-on: ubuntu-latest
    steps:
    - name: Checkout PR
      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      with:
        ref: ${{ github.head_ref }}
        persist-credentials: false

    - name: "Setup"
      uses: open-edge-platform/orch-ci/.github/actions/bootstrap@5239def5323b42bf54ea60ecf894a5248740f82a  # 2026.1.1
      with:
        gh_token: ${{ secrets.SYS_EMF_GH_TOKEN }}
        bootstrap_tools: "go,gotools,nodejs"

    - name: Lint code
      run: make lint

  build:
    permissions:
      contents: read
    runs-on: ubuntu-latest
    steps:
    - name: Checkout PR
      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      with:
        ref: ${{ github.head_ref }}
        persist-credentials: false

    - name: "Setup"
      uses: open-edge-platform/orch-ci/.github/actions/bootstrap@5239def5323b42bf54ea60ecf894a5248740f82a  # 2026.1.1
      with:
        gh_token: ${{ secrets.SYS_EMF_GH_TOKEN }}
        bootstrap_tools: "go,gotools"

    - name: Build code
      run: make build

  test:
    permissions:
      contents: read
    runs-on: ubuntu-latest
    steps:
    - name: Checkout PR
      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      with:
        ref: ${{ github.head_ref }}
        persist-credentials: false

    - name: "Setup"
      uses: open-edge-platform/orch-ci/.github/actions/bootstrap@5239def5323b42bf54ea60ecf894a5248740f82a  # 2026.1.1
      with:
        gh_token: ${{ secrets.SYS_EMF_GH_TOKEN }}
        bootstrap_tools: "go,gotools"

    - name: Test code
      run: make test

  pre-merge:
    permissions:
      contents: read
    needs: [lint, build, test]
    uses: open-edge-platform/orch-ci/.github/workflows/pre-merge.yml@072332a8215754f6496bf97c8f3c7559dba5fdc1  # 2026.1.1
    with:
      bootstrap_tools: "base,go"
      cache_go: true
      remove_cache_go: true
      run_security_scans: true
      run_version_check: true
      run_dep_version_check: true
      run_build: false
      run_lint: false
      run_test: false
      run_validate_clean_folder: false
      run_docker_build: true
      run_docker_push: false
      run_helm_build: true
      run_helm_push: false
      run_artifact: false
      version_suffix: "-pr-${{ github.event.number }}"
    secrets: inherit  # zizmor: ignore[secrets-inherit]