CI: Prepare artefacts for sdg linux rpi repo (To be reviewed after release)#3341
CI: Prepare artefacts for sdg linux rpi repo (To be reviewed after release)#3341liviutomoiaga wants to merge 2 commits into
Conversation
ba02dc3 to
789cc80
Compare
| # Condition: Fork PRs blocked (no secrets access). Push scope handled by workflow trigger. | ||
| deploy_rpi_artifacts: | ||
| needs: [assert_build] | ||
| if: github.repository_owner == 'analogdevicesinc' |
There was a problem hiding this comment.
| if: github.repository_owner == 'analogdevicesinc' | |
| if: ${{ github.event.pull_request.head.repo.full_name == github.repository || github.event_name == 'push' }} |
The current format tries to upload for pull requests from forks, too.
For forks prs, github.repository_owner is still analogdevicesinc
|| github.event_name == 'push' is safe because github.repository_owner == 'analogdevicesinc' is already gated on previous runs (the ci/cd never runs for push on forks (waste of resources), only intentional prs).
so, effectively, the rule is
(github.repository_owner == 'analogdevicesinc' && github.event_name == 'push') ||
(github.event.pull_request.head.repo.full_name == github.repository && github.event_name == 'pull_request')
the should match what you need:
under analogdevicesinc, run on push and pull request, only if the origin owner is analogdevicesinc too
| adi_bcm*_defconfig-* | ||
| dtb-* | ||
|
|
||
| # Condition: Fork PRs blocked (no secrets access). Push scope handled by workflow trigger. |
There was a problem hiding this comment.
Comment not necessary necessary
789cc80 to
b19f40b
Compare
| - rpi-6.6.y | ||
| - rpi-6.12.y | ||
| - staging/rpi/* | ||
| - rpi/release/* |
There was a problem hiding this comment.
@gastmaier - should I update top-level.yml with conditional push trigger on staging/rpi/* or rpi/release/* ?
b19f40b to
b453999
Compare
gastmaier
left a comment
There was a problem hiding this comment.
Thanks! I reduced the contents write permission to read
Use deploy-kuiper-artifacts.yml shared action to deploy to sdg-linux cloudsmith (S3). Reduce contents write permission to read. Signed-off-by: Liviu Tomoiaga <Liviu.Tomoiaga@analog.com>
6db22bc to
6d552fe
Compare
Reduce the trigger events only for rpi/release/* push or pull-request. Remove Upload to Cloudsmith step since it will be done on top-level.yml. Signed-off-by: Liviu Tomoiaga <Liviu.Tomoiaga@analog.com>
Consolidate the separate Kuiper and RPI artifact deployment workflows into a single unified workflow, reducing duplication and simplifying maintenance. This implementation should replace azure-pipelines-rpi.yml from main branch.
PR Description
necessary to understand them. List any dependencies required for this change.
any space), or simply check them after publishing the PR.
description and try to push all related PRs simultaneously.
PR Type
PR Checklist