tech-docs-gem/.github/workflows/pipeline.yaml at cbe5af5624b7f636310ff05b2531e703e9cd87c5 · alphagov/tech-docs-gem · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
name: pipeline
on:
  pull_request:
    branches: [ "main"]
  push:
    branches: [ "main"]

jobs:
  npm-vulnerability-scanner:
    uses: ./.github/workflows/npm-vulnerability-scanner.yaml
    permissions:
      contents: read

  ruby-vulnerability-scanner:
    needs: npm-vulnerability-scanner
    uses: ./.github/workflows/ruby-vulnerability-scanner.yaml
    permissions:
      contents: read

  test:
    needs: ruby-vulnerability-scanner
    uses: ./.github/workflows/test.yaml
    permissions:
      contents: read          # Allows the action to check out your repository code
      pull-requests: write    # Allows the action to comment on or update the Dependabot PR
      statuses: write         # Allows the action to post pass/fail build statuses

  check-gem-version:
    needs: test
    uses: ./.github/workflows/check-gem-version.yaml

  publish-gem:
    needs: check-gem-version
    if: github.event_name == 'push' && needs.check-gem-version.outputs.version-changed == 'true'
    with:
      new-gem-version: true
    uses: ./.github/workflows/publish-gem.yaml
    permissions:
      contents: write  # needed to be able to tag the release

  check-documentation-updates:
     needs: publish-gem
     if: |
       github.event_name == 'push' &&
       always() &&
       (needs.publish-gem.result == 'success' || needs.publish-gem.result == 'skipped')
     uses: ./.github/workflows/check-documentation-updates.yaml

  publish-github-pages:
    needs: check-documentation-updates
    if: github.event_name == 'push' && needs.check-documentation-updates.outputs.documentation-updated == 'true'
    uses: ./.github/workflows/publish-github-pages.yaml
    permissions:
      contents: read
      pages: write
      id-token: write