test.yaml

name: test

on: pull_request
concurrency:
  group: ${{ github.workflow }}--${{ github.ref }}
  cancel-in-progress: true

jobs:
  path-filter:
    # Get changed files to filter jobs
    timeout-minutes: 10
    outputs:
      update-aqua-checksums: ${{steps.changes.outputs.update-aqua-checksums}}
      update-aqua-checksums-install: ${{steps.changes.outputs.update-aqua-checksums-install}}
      renovate-config-validator: ${{steps.changes.outputs.renovate-config-validator}}
      ghalint: ${{steps.changes.outputs.ghalint}}
      shellcheck: ${{steps.changes.outputs.shellcheck}}
    runs-on: ubuntu-latest
    permissions: {}
    steps:
      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
        id: changes
        with:
          filters: |
            update-aqua-checksums:
              - aqua/aqua.yaml
              - aqua/*.yaml
              - aqua/aqua-checksums.json
              - .github/workflows/test.yaml
              - .github/workflows/wc-update-aqua-checksums.yaml
            update-aqua-checksums-install:
              - install/aqua.yaml
              - install/aqua/*.yaml
              - install/aqua-checksums.json
              - .github/workflows/test.yaml
              - .github/workflows/wc-update-aqua-checksums-install.yaml
            renovate-config-validator:
              - renovate.json5
              - .github/workflows/test.yaml
              - .github/workflows/wc-renovate-config-validator.yaml
            ghalint:
              - .github/workflows/*.yaml
              - aqua/ghalint.yaml
            build-schema:
              - .github/workflows/test.yaml
              - .github/workflows/wc-deploy-schema.yaml
              - "schema/**"
            shellcheck:
              - .github/workflows/test.yaml
              - .github/workflows/wc-shellcheck.yaml
              - aqua/shellcheck.yaml
              - "**/*.sh"

  status-check:
    # This job is used for main branch's branch protection rule's status check.
    # If all dependent jobs succeed or are skipped this job succeeds.
    timeout-minutes: 10
    runs-on: ubuntu-latest
    needs:
      - update-aqua-checksums
      - update-aqua-checksums-install
      - renovate-config-validator
      - ghalint
      - build-schema
      - create-pr-branch
      - format
      - test
      - hide-comment
    permissions: {}
    if: failure()
    steps:
      - run: exit 1

  update-aqua-checksums:
    needs: path-filter
    if: needs.path-filter.outputs.update-aqua-checksums == 'true'
    uses: ./.github/workflows/wc-update-aqua-checksums.yaml
    permissions:
      contents: read
    secrets:
      gh_app_id: ${{secrets.APP_ID}}
      gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}}

  update-aqua-checksums-install:
    needs: path-filter
    if: needs.path-filter.outputs.update-aqua-checksums-install == 'true'
    uses: ./.github/workflows/wc-update-aqua-checksums-install.yaml
    permissions:
      contents: read
    secrets:
      gh_app_id: ${{secrets.APP_ID}}
      gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}}

  renovate-config-validator:
    uses: ./.github/workflows/wc-renovate-config-validator.yaml
    needs: path-filter
    if: needs.path-filter.outputs.renovate-config-validator == 'true'
    permissions:
      contents: read

  ghalint:
    needs: path-filter
    if: needs.path-filter.outputs.ghalint == 'true'
    uses: ./.github/workflows/wc-ghalint.yaml
    permissions: {}

  shellcheck:
    needs: path-filter
    if: needs.path-filter.outputs.shellcheck == 'true'
    uses: ./.github/workflows/wc-shellcheck.yaml
    permissions: {}

  build-schema:
    uses: ./.github/workflows/wc-deploy-schema.yaml
    permissions:
      contents: write

  test:
    uses: ./.github/workflows/wc-test.yaml
    permissions: {}

  create-pr-branch:
    uses: ./.github/workflows/wc-create-pr-branch.yaml
    if: github.event.pull_request.user.login == 'suzuki-shunsuke'
    permissions:
      contents: write
      pull-requests: write
      issues: write
    with:
      pr: ${{github.event.pull_request.number}}
    secrets:
      gh_app_id: ${{secrets.APP_ID}}
      gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}}

  hide-comment:
    uses: ./.github/workflows/wc-hide-comment.yaml
    if: |
      ! github.event.pull_request.head.repo.fork
    permissions: {}
    secrets:
      gh_app_id: ${{secrets.APP_ID}}
      gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}}

  format:
    uses: ./.github/workflows/wc-format.yaml
    permissions: {}
    secrets:
      gh_app_id: ${{secrets.APP_ID}}
      gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}}