Skip to content

Commit 76e8a96

Browse files
Copilotlpcox
Copilot
and
lpcox
authored
chore: rebase main and recompile workflows
Agent-Logs-Url: https://github.com/github/gh-aw-firewall/sessions/4f16749e-8ad3-433a-a9a6-e3eff88697da Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
1 parent 891ef7a commit 76e8a96

31 files changed

+1994
-1385
lines changed

‎.github/aw/actions-lock.json‎

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -40,16 +40,6 @@
4040
"version": "v4.0.0",
4141
"sha": "4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd"
4242
},
43-
"github/gh-aw-actions/setup-cli@v0.68.7": {
44-
"repo": "github/gh-aw-actions/setup-cli",
45-
"version": "v0.68.7",
46-
"sha": "f52802884d655622f0a2dfd6d6a2250983c95523"
47-
},
48-
"github/gh-aw-actions/setup@v0.68.7": {
49-
"repo": "github/gh-aw-actions/setup",
50-
"version": "v0.68.7",
51-
"sha": "f52802884d655622f0a2dfd6d6a2250983c95523"
52-
},
5343
"github/gh-aw/actions/setup@v0.68.7": {
5444
"repo": "github/gh-aw/actions/setup",
5545
"version": "v0.68.7",

‎.github/workflows/agentics-maintenance.yml‎

Lines changed: 150 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# \ /\ / (_) | | | | ( | | | | (_) \ V V /\__ \
1313
# \/ \/ \___/|_| |_|\_\|_| |_|\___/ \_/\_/ |___/
1414
#
15-
# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.68.7). DO NOT EDIT.
15+
# This file was automatically generated by pkg/workflow/maintenance_workflow.go. DO NOT EDIT.
1616
#
1717
# To regenerate this workflow, run:
1818
# gh aw compile
@@ -88,13 +88,20 @@ jobs:
8888
issues: write
8989
pull-requests: write
9090
steps:
91+
- name: Checkout actions folder
92+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
93+
with:
94+
sparse-checkout: |
95+
actions
96+
persist-credentials: false
97+
9198
- name: Setup Scripts
92-
uses: github/gh-aw-actions/setup@f52802884d655622f0a2dfd6d6a2250983c95523 # v0.68.7
99+
uses: ./actions/setup
93100
with:
94101
destination: ${{ runner.temp }}/gh-aw/actions
95102

96103
- name: Close expired discussions
97-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
104+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
98105
with:
99106
script: |
100107
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
@@ -103,7 +110,7 @@ jobs:
103110
await main();
104111
105112
- name: Close expired issues
106-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
113+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
107114
with:
108115
script: |
109116
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
@@ -112,7 +119,7 @@ jobs:
112119
await main();
113120
114121
- name: Close expired pull requests
115-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
122+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
116123
with:
117124
script: |
118125
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
@@ -126,13 +133,20 @@ jobs:
126133
permissions:
127134
actions: write
128135
steps:
136+
- name: Checkout actions folder
137+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
138+
with:
139+
sparse-checkout: |
140+
actions
141+
persist-credentials: false
142+
129143
- name: Setup Scripts
130-
uses: github/gh-aw-actions/setup@f52802884d655622f0a2dfd6d6a2250983c95523 # v0.68.7
144+
uses: ./actions/setup
131145
with:
132146
destination: ${{ runner.temp }}/gh-aw/actions
133147

134148
- name: Cleanup outdated cache-memory entries
135-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
149+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
136150
with:
137151
script: |
138152
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
@@ -156,12 +170,12 @@ jobs:
156170
persist-credentials: false
157171

158172
- name: Setup Scripts
159-
uses: github/gh-aw-actions/setup@f52802884d655622f0a2dfd6d6a2250983c95523 # v0.68.7
173+
uses: ./actions/setup
160174
with:
161175
destination: ${{ runner.temp }}/gh-aw/actions
162176

163177
- name: Check admin/maintainer permissions
164-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
178+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
165179
with:
166180
github-token: ${{ secrets.GITHUB_TOKEN }}
167181
script: |
@@ -170,17 +184,21 @@ jobs:
170184
const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
171185
await main();
172186
173-
- name: Install gh-aw
174-
uses: github/gh-aw-actions/setup-cli@f52802884d655622f0a2dfd6d6a2250983c95523 # v0.68.7
187+
- name: Setup Go
188+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
175189
with:
176-
version: v0.68.7
190+
go-version-file: go.mod
191+
cache: true
192+
193+
- name: Build gh-aw
194+
run: make build
177195

178196
- name: Run operation
179-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
197+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
180198
env:
181199
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
182200
GH_AW_OPERATION: ${{ inputs.operation }}
183-
GH_AW_CMD_PREFIX: gh aw
201+
GH_AW_CMD_PREFIX: ./gh-aw
184202
with:
185203
github-token: ${{ secrets.GITHUB_TOKEN }}
186204
script: |
@@ -213,12 +231,12 @@ jobs:
213231
persist-credentials: false
214232

215233
- name: Setup Scripts
216-
uses: github/gh-aw-actions/setup@f52802884d655622f0a2dfd6d6a2250983c95523 # v0.68.7
234+
uses: ./actions/setup
217235
with:
218236
destination: ${{ runner.temp }}/gh-aw/actions
219237

220238
- name: Check admin/maintainer permissions
221-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
239+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
222240
with:
223241
github-token: ${{ secrets.GITHUB_TOKEN }}
224242
script: |
@@ -228,7 +246,7 @@ jobs:
228246
await main();
229247
230248
- name: Apply Safe Outputs
231-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
249+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
232250
env:
233251
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
234252
GH_AW_RUN_URL: ${{ inputs.run_url }}
@@ -257,12 +275,12 @@ jobs:
257275
persist-credentials: false
258276

259277
- name: Setup Scripts
260-
uses: github/gh-aw-actions/setup@f52802884d655622f0a2dfd6d6a2250983c95523 # v0.68.7
278+
uses: ./actions/setup
261279
with:
262280
destination: ${{ runner.temp }}/gh-aw/actions
263281

264282
- name: Check admin/maintainer permissions
265-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
283+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
266284
with:
267285
github-token: ${{ secrets.GITHUB_TOKEN }}
268286
script: |
@@ -271,15 +289,19 @@ jobs:
271289
const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
272290
await main();
273291
274-
- name: Install gh-aw
275-
uses: github/gh-aw-actions/setup-cli@f52802884d655622f0a2dfd6d6a2250983c95523 # v0.68.7
292+
- name: Setup Go
293+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
276294
with:
277-
version: v0.68.7
295+
go-version-file: go.mod
296+
cache: true
297+
298+
- name: Build gh-aw
299+
run: make build
278300

279301
- name: Create missing labels
280-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
302+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
281303
env:
282-
GH_AW_CMD_PREFIX: gh aw
304+
GH_AW_CMD_PREFIX: ./gh-aw
283305
with:
284306
github-token: ${{ secrets.GITHUB_TOKEN }}
285307
script: |
@@ -301,12 +323,12 @@ jobs:
301323
persist-credentials: false
302324

303325
- name: Setup Scripts
304-
uses: github/gh-aw-actions/setup@f52802884d655622f0a2dfd6d6a2250983c95523 # v0.68.7
326+
uses: ./actions/setup
305327
with:
306328
destination: ${{ runner.temp }}/gh-aw/actions
307329

308330
- name: Check admin/maintainer permissions
309-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
331+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
310332
with:
311333
github-token: ${{ secrets.GITHUB_TOKEN }}
312334
script: |
@@ -315,19 +337,116 @@ jobs:
315337
const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
316338
await main();
317339
318-
- name: Install gh-aw
319-
uses: github/gh-aw-actions/setup-cli@f52802884d655622f0a2dfd6d6a2250983c95523 # v0.68.7
340+
- name: Setup Go
341+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
320342
with:
321-
version: v0.68.7
343+
go-version-file: go.mod
344+
cache: true
345+
346+
- name: Build gh-aw
347+
run: make build
322348

323349
- name: Validate workflows and file issue on findings
324-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
350+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
325351
env:
326-
GH_AW_CMD_PREFIX: gh aw
352+
GH_AW_CMD_PREFIX: ./gh-aw
327353
with:
328354
github-token: ${{ secrets.GITHUB_TOKEN }}
329355
script: |
330356
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
331357
setupGlobals(core, github, context, exec, io, getOctokit);
332358
const { main } = require('${{ runner.temp }}/gh-aw/actions/run_validate_workflows.cjs');
333359
await main();
360+
361+
compile-workflows:
362+
if: ${{ (!(github.event.repository.fork)) && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '') }}
363+
runs-on: ubuntu-slim
364+
permissions:
365+
contents: read
366+
issues: write
367+
steps:
368+
- name: Checkout repository
369+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
370+
with:
371+
persist-credentials: false
372+
373+
- name: Setup Go
374+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
375+
with:
376+
go-version-file: go.mod
377+
cache: true
378+
379+
- name: Build gh-aw
380+
run: make build
381+
382+
- name: Compile workflows
383+
run: |
384+
./gh-aw compile --validate --validate-images --verbose
385+
echo "✓ All workflows compiled successfully"
386+
387+
- name: Setup Scripts
388+
uses: ./actions/setup
389+
with:
390+
destination: ${{ runner.temp }}/gh-aw/actions
391+
392+
- name: Check for out-of-sync workflows and create issue if needed
393+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
394+
with:
395+
script: |
396+
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
397+
setupGlobals(core, github, context, exec, io, getOctokit);
398+
const { main } = require('${{ runner.temp }}/gh-aw/actions/check_workflow_recompile_needed.cjs');
399+
await main();
400+
401+
secret-validation:
402+
if: ${{ (!(github.event.repository.fork)) && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '') }}
403+
runs-on: ubuntu-slim
404+
permissions:
405+
contents: read
406+
steps:
407+
- name: Checkout actions folder
408+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
409+
with:
410+
sparse-checkout: |
411+
actions
412+
persist-credentials: false
413+
414+
- name: Setup Node.js
415+
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
416+
with:
417+
node-version: '22'
418+
419+
- name: Setup Scripts
420+
uses: ./actions/setup
421+
with:
422+
destination: ${{ runner.temp }}/gh-aw/actions
423+
424+
- name: Validate Secrets
425+
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
426+
env:
427+
# GitHub tokens
428+
GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
429+
GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
430+
GH_AW_PROJECT_GITHUB_TOKEN: ${{ secrets.GH_AW_PROJECT_GITHUB_TOKEN }}
431+
GH_AW_COPILOT_TOKEN: ${{ secrets.GH_AW_COPILOT_TOKEN }}
432+
# AI Engine API keys
433+
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
434+
OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
435+
BRAVE_API_KEY: ${{ secrets.BRAVE_API_KEY }}
436+
# Integration tokens
437+
NOTION_API_TOKEN: ${{ secrets.NOTION_API_TOKEN }}
438+
with:
439+
script: |
440+
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
441+
setupGlobals(core, github, context, exec, io, getOctokit);
442+
const { main } = require('${{ runner.temp }}/gh-aw/actions/validate_secrets.cjs');
443+
await main();
444+
445+
- name: Upload secret validation report
446+
if: always()
447+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
448+
with:
449+
name: secret-validation-report
450+
path: secret-validation-report.md
451+
retention-days: 30
452+
if-no-files-found: warn

0 commit comments

Comments
 (0)