rhdh-loadtest/.github/workflows/ci.yaml at c74bfce0bbcab12688d289d4ee2b9d682a79bd3f · redhat-developer/rhdh-loadtest · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

permissions:
  contents: read

jobs:
  validate:
    runs-on: ubuntu-latest

    steps:
      - name: Harden runner
        uses: step-security/harden-runner@v2
        with:
          egress-policy: audit

      - name: Checkout
        uses: actions/checkout@v7

      - name: Validate YAML files in argocd/ and catalog/
        run: |
          find .github argocd catalog helm techdocs -name '*.yaml' -o -name '*.yml' | while read -r file; do
            echo "  $file"
            yq '.' "$file" > /dev/null
          done

      - name: Run shellcheck on scripts/
        run: |
          echo "Running shellcheck on scripts/..."
          find scripts -name '*.sh' | while read -r file; do
            echo "  $file"
            shellcheck "$file"
          done

      - name: Verify no changes in .github/
        run: |
          if [ -n "$(git status --porcelain .github/)" ]; then
            echo "::error::Unexpected changes detected in .github/ after CI steps:"
            git diff .github/
            exit 1
          fi
          echo "No changes in .github/ — OK"

  plugins:
    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        workspace:
          - backstage-1.42
          - backstage-1.45
          - backstage-1.49
          - backstage-1.52

    steps:
      - name: Harden runner
        uses: step-security/harden-runner@v2
        with:
          egress-policy: audit

      - name: Checkout
        uses: actions/checkout@v7

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version-file: plugins/${{ matrix.workspace }}/package.json

      - name: Install dependencies
        run: yarn install --immutable
        working-directory: plugins/${{ matrix.workspace }}

      - name: TypeScript type check
        run: yarn tsc
        working-directory: plugins/${{ matrix.workspace }}

      - name: Lint
        run: yarn lint:all
        working-directory: plugins/${{ matrix.workspace }}

      # - name: Check formatting
      #   run: yarn prettier:check
      #   working-directory: plugins/${{ matrix.workspace }}

      - name: Build
        run: yarn build:all
        working-directory: plugins/${{ matrix.workspace }}

  plugins-check:
    if: always()
    needs: plugins
    runs-on: ubuntu-latest

    steps:
      - name: Harden runner
        uses: step-security/harden-runner@v2
        with:
          egress-policy: audit

      - name: Verify all plugin matrix jobs passed
        run: |
          if [ "${{ needs.plugins.result }}" != "success" ]; then
            echo "::error::One or more plugin matrix jobs failed"
            exit 1
          fi