Permslip integration #380
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| jobs: | |
| Test: | |
| runs-on: ubuntu-22.04 | |
| permissions: | |
| contents: read | |
| id-token: write | |
| steps: | |
| - name: Install Rust toolchain | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: 1.97.1 | |
| components: clippy,rustfmt | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| # Cargo fetches every git dependency at resolution time, enabled | |
| # or not. So even feature-less builds need to fetch permission-slip. | |
| # Forks skip this and fail here. | |
| - name: Get token to fetch private repositories | |
| if: github.repository == 'oxidecomputer/sush' | |
| uses: oxidecomputer/oidcx-action@main | |
| with: | |
| service: github | |
| repositories: oxidecomputer/permission-slip | |
| permissions: contents:read | |
| configure-git: true | |
| - name: Install just and nextest | |
| uses: taiki-e/install-action@v2 | |
| with: | |
| tool: just,nextest | |
| # The recipe is the source of truth shared with local runs. | |
| - name: CI | |
| run: just ci | |
| # The permslip feature pulls in permission-slip, which is private, | |
| # so this job only runs where the OIDC exchange can succeed. | |
| Permslip: | |
| if: github.repository == 'oxidecomputer/sush' | |
| runs-on: ubuntu-22.04 | |
| permissions: | |
| contents: read | |
| id-token: write | |
| steps: | |
| - name: Install Rust toolchain | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: 1.97.1 | |
| components: clippy | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Get token to fetch private repositories | |
| uses: oxidecomputer/oidcx-action@main | |
| with: | |
| service: github | |
| repositories: oxidecomputer/permission-slip | |
| permissions: contents:read | |
| configure-git: true | |
| - name: Install just | |
| uses: taiki-e/install-action@just | |
| - name: CI | |
| run: just ci-client |