feat(actions): add shared composite actions for org-wide CI - #1
Open
MAHDTech wants to merge 2 commits into
Open
Conversation
Introduce three composite actions consumed by every tf-module repository, pinned by SHA from their workflows: - setup-devenv: Install Nix + Cachix + devenv, with an optional GitHub App token for the Nix GitHub access token. - app-token: mint a GitHub App installation token with GITHUB_TOKEN fallback, for creating pull requests, tags and releases that must trigger downstream workflows (bot PRs otherwise sit in "workflows awaiting approval", and releases created with GITHUB_TOKEN never fire the publish-on-release job). - commit-status: report a commit status from a step outcome, replacing the per-workflow copy-pasted gh api block. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
The app-id input is deprecated in create-github-app-token v3 in favour of client-id. Rename the composite inputs accordingly (ci_app_id -> ci_app_client_id, app_id -> app_client_id) and mint with client-id + CI_APP_CLIENT_ID. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds three shared composite actions (
setup-devenv,app-token,commit-status) that every tf-module repository will consume pinned by SHA — stage 1 of the org-wide CI cleanup.Stage 2 pilots the migration end-to-end on tf-sleep (all five workflows onto the composites, App token for PR and release creation — which also wakes the never-fired publish-on-release job in opentofu-module.yaml). Stage 3 rolls out to the remaining repos once the pilot is confirmed.
Note: the App-token path needs the CI_APP_ID / CI_APP_PRIVATE_KEY org secrets, which this org does not have yet — they are being added via lz-github actions.yaml. Until they land, the composites fall back to GITHUB_TOKEN (current behaviour).
🤖 Generated with Claude Code