Skip to content

fix: workflow names, update depgraph on build #6

fix: workflow names, update depgraph on build

fix: workflow names, update depgraph on build #6

Workflow file for this run

name: Push
on:
push:
branches: [master, main, beta]
env:
CI: "true"
GRADLE_OPTS: -Dorg.gradle.jvmargs="-XX:+UseParallelGC -Xmx3g -XX:MetaspaceSize=512M -XX:MaxMetaspaceSize=512M"
GRADLE_CACHE_LOCAL: true
GRADLE_CACHE_REMOTE: true
GRADLE_CACHE_PUSH: true
GRADLE_CACHE_USERNAME: apikey
GRADLE_CACHE_PASSWORD: ${{ secrets.BUILDLESS_APIKEY }}
CACHE_ENDPOINT: ${{ vars.CACHE_ENDPOINT_GRADLE }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
TEST_EXCEPTIONS: true
jobs:
build:

Check failure on line 21 in .github/workflows/push.yml

View workflow run for this annotation

GitHub Actions / Push

Invalid workflow file

The workflow is not valid. .github/workflows/push.yml (Line: 21, Col: 3): Error calling workflow 'elide-dev/uuid/.github/workflows/step.build.yml@f6aa5b591a835e4f75c0141ed8e3dad8d80c11ca'. The nested job 'provenance' is requesting 'actions: read', but is only allowed 'actions: none'.
name: "Build (${{ matrix.label }})"
permissions:
contents: "write"
id-token: "write"
checks: "write"
pull-requests: write
strategy:
fail-fast: false
matrix:
runner: [macOS-latest, windows-latest, ubuntu-latest]
include:
- runner: macOS-latest
flags: "--no-configuration-cache"
os: "macos"
label: "Darwin"
experimental: false
coverage: true
gvm: ${{ vars.GVM_VERSION }}
java: ${{ vars.JVM_VERSION }}
- runner: windows-latest-8-cores
flags: "--no-configuration-cache"
os: "windows"
label: "Windows"
experimental: false
coverage: true
gvm: ${{ vars.GVM_VERSION }}
java: ${{ vars.JVM_VERSION }}
- runner: ubuntu-latest-4-cores
flags: "--no-configuration-cache -PsonarScan=true"
os: "linux"
label: "Linux"
experimental: false
coverage: true
gvm: ${{ vars.GVM_VERSION }}
java: ${{ vars.JVM_VERSION }}
uses: ./.github/workflows/step.build.yml
secrets: inherit
with:
runner: ${{ matrix.runner }}
os: ${{ matrix.os }}
label: ${{ matrix.label }}
flags: ${{ matrix.flags }}
experimental: ${{ matrix.experimental }}
java: ${{ matrix.java }}
coverage: ${{ matrix.coverage }}
codeql:
name: "Analysis: CodeQL"
needs: ["build"]
uses: ./.github/workflows/codeql.ci.yml
secrets: inherit
with: {}
permissions:
actions: read
contents: read
security-events: write
qodana:
name: "Analysis: Qodana"
needs: ["build"]
uses: ./.github/workflows/qodana.ci.yml
with: {}
secrets: inherit
permissions:
actions: read
contents: read
security-events: write
publish-sandbox:
permissions: write-all
name: "Publish: Sandbox"
needs: ["build", "codeql", "qodana"]
uses: ./.github/workflows/step.publish.yml
secrets:
GOOGLE_CREDENTIALS: ${{ secrets.BUILDBOT_SERVICE_ACCOUNT }}
SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
with:
version: "1.0-SNAPSHOT"
repository: "gcs://elide-snapshots/repository/v3"
logLevel: "info"
snapshot: true
release: false
signing: true
gcs: true
environment: sandbox
label: "Elide Sandbox"