IDX GitHub Automation

.github/workflows/ci-main.yml

@@ -98,9 +98,16 @@ jobs:
         uses: ./.github/actions/bazel-test-all/
         with:
           BAZEL_COMMAND: test --config=ci ${{ env.BAZEL_EXTRA_ARGS }}
-          BAZEL_TARGETS: //...
+          BAZEL_TARGETS: "//..."
           BUILDEVENT_APIKEY: ${{ secrets.HONEYCOMB_TOKEN }}
           GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+      - name: Upload out_shafile
+        uses: actions/upload-artifact@v4
+        with:
+          name: out_shafile_all
+          retention-days: 1
+          path: |
+            out_shafile_all
       - name: Upload bazel-bep
         # runs only if previous step succeeded or failed;
         # we avoid collecting artifacts of jobs that were cancelled
@@ -291,20 +298,28 @@ jobs:
         id: build-ic
         shell: bash
         run: |
-          set -eExuo pipefail
-          [ -n "${NODE_NAME:-}" ] && echo "Run on node: $NODE_NAME" >>$GITHUB_STEP_SUMMARY
+          set -euo pipefail
           REPO_NAME="${GITHUB_REPOSITORY##*/}"
           rm -rf "/cache/job/${CI_JOB_NAME}/${CI_RUN_ID}"
           mkdir -p "/cache/job/${CI_JOB_NAME}/${CI_RUN_ID}/artifacts"
           ln -s "/cache/job/${CI_JOB_NAME}/${CI_RUN_ID}/artifacts" /__w/$REPO_NAME/$REPO_NAME/artifacts
           "$CI_PROJECT_DIR"/ci/scripts/run-build-ic.sh
           rm -rf "/cache/job/${CI_JOB_NAME}/${CI_RUN_ID}"
+
+          find -L bazel-out -name SHA256SUMS | xargs cat | sort | uniq > out_shafile_build
         env:
           BAZEL_COMMAND: build --config=ci
           BAZEL_TARGETS: //...
           MERGE_BASE_SHA: ${{ github.event.pull_request.base.sha }}
           BRANCH_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
           RUN_ON_DIFF_ONLY: ${{ github.event_name == 'pull_request' && !contains(github.event.pull_request.labels.*.name, 'CI_ALL_BAZEL_TARGETS') }}
+      - name: Upload out_shafile
+        uses: actions/upload-artifact@v4
+        with:
+          name: out_shafile_build
+          retention-days: 1
+          path: |
+            out_shafile_build
       - name: Upload build-ic.tar
         uses: actions/upload-artifact@v4
         with:
@@ -352,6 +367,17 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: build-ic
+      - name: Download out_shafile_all
+        uses: actions/download-artifact@v4
+        with:
+          name: out_shafile_all
+      - name: Download out_shafile_build
+        uses: actions/download-artifact@v4
+        with:
+          name: out_shafile_build
+      - name: diff
+        run: |
+          diff <(sort < ./out_shafile_build) <(sort <./out_shafile_all)
       - name: Build Determinism Test
         id: build-determinism
         run: |