Implement PR feedback. #38
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI/CD and Webhook | |
| on: [push, pull_request] | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: 3.12 | |
| - name: Create virtual environment | |
| run: python -m venv .venv | |
| - name: Activate virtual environment | |
| run: source .venv/bin/activate | |
| - name: Install dependencies | |
| run: pip install -r requirements.txt | |
| - name: Run pre-commit checks | |
| run: pre-commit run --all-files | |
| webhook: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Install Google Cloud CLI | |
| run: | | |
| echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] http://packages.cloud.google.com/apt cloud-sdk main" | sudo tee -a /etc/apt/sources.list.d/google-cloud-sdk.list | |
| sudo apt-get install apt-transport-https ca-certificates gnupg | |
| curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key --keyring /usr/share/keyrings/cloud.google.gpg add - | |
| sudo apt-get update && sudo apt-get install google-cloud-cli | |
| - name: Authenticate with Google Cloud | |
| run: | | |
| echo '${{ secrets.GCP_SA_KEY }}' > sa-key.json | |
| gcloud auth activate-service-account sa-git-data-sources@tgs-prediktor-dev-598e.iam.gserviceaccount.com --key-file=sa-key.json | |
| rm sa-key.json | |
| - name: Generate and send identity token | |
| run: | | |
| IDENTITY_TOKEN=$(gcloud auth print-identity-token --audiences="https://us-central1-tgs-prediktor-dev-598e.cloudfunctions.net/git_webhook_to_bigquery") | |
| WEBHOOK_URL="https://us-central1-tgs-prediktor-dev-598e.cloudfunctions.net/git_webhook_to_bigquery" | |
| prepare_payload() { | |
| local event_type="$1" | |
| jq -n \ | |
| --arg event "$event_type" \ | |
| --arg repository "${{ github.repository }}" \ | |
| --arg url "https://github.com/${{ github.repository }}" \ | |
| --arg actor "${{ github.actor }}" \ | |
| --arg ref "${{ github.ref }}" \ | |
| --argjson payload "$2" \ | |
| '{ | |
| event: $event, | |
| repository: { name: $repository, url: $url }, | |
| actor: $actor, | |
| ref: $ref, | |
| payload: $payload | |
| }' | |
| } | |
| case "${{ github.event_name }}" in | |
| push) | |
| PAYLOAD=$(prepare_payload "push" "$(echo '${{ toJson(github.event) }}' | jq '{commits: .commits, before: .before, after: .after, pusher: .pusher}')") | |
| ;; | |
| pull_request) | |
| PAYLOAD=$(prepare_payload "pull_request" "$(echo '${{ toJson(github.event.pull_request) }}' | jq '{number: .number, title: .title, state: .state, body: .body}')") | |
| ;; | |
| *) | |
| PAYLOAD=$(prepare_payload "${{ github.event_name }}" "{}") | |
| ;; | |
| esac | |
| curl -H "Authorization: Bearer $IDENTITY_TOKEN" \ | |
| -H "Content-Type: application/json" \ | |
| -d "$PAYLOAD" \ | |
| $WEBHOOK_URL |