seL4/.github/workflows/preprocess-deploy.yml
Gerwin Klein e5791a76cb github: run actions with secrets only in seL4 org
Some of the Github actions in this repository require secrets for
access to hardware test or other compute infrastructure, or for
deployment. When these are run in a fork on GitHub they are safe,
but generate annoying error messages.

This commit adds tests in the relevant actions whether they are run
from the seL4 org or not, and skips the action when they are run
outside. This should make the remaining actions more useful on forks.

Signed-off-by: Gerwin Klein <gerwin.klein@proofcraft.systems>
2021-10-18 14:47:07 +11:00

51 lines
1.1 KiB
YAML

# Copyright 2021, Proofcraft Pty ltd
#
# SPDX-License-Identifier: BSD-2-Clause
# Sync proofs: deploy new verification manifest on successful preprocess test
name: Proof Sync
on:
push:
branches:
- master
jobs:
code:
name: Code Freeze
runs-on: ubuntu-latest
outputs:
xml: ${{ steps.repo.outputs.xml }}
steps:
- id: repo
uses: seL4/ci-actions/repo-checkout@master
with:
manifest_repo: verification-manifest
manifest: devel.xml
preprocess:
name: Preprocess
needs: code
runs-on: ubuntu-latest
strategy:
matrix:
arch: [ARM, ARM_HYP, RISCV64, X64]
# no MCS here, auto-updating mcs.xml should be a separate job.
steps:
- uses: seL4/ci-actions/preprocess@master
with:
L4V_ARCH: ${{ matrix.arch }}
deploy:
name: Deploy manifest
needs: [code, preprocess]
if: ${{ github.repository_owner == 'seL4' }}
runs-on: ubuntu-latest
steps:
- uses: seL4/ci-actions/l4v-deploy@master
with:
xml: ${{ needs.code.outputs.xml }}
preprocess: 'true'
env:
GH_SSH: ${{ secrets.CI_SSH }}