Skip to content

final composite actions mint test #587

final composite actions mint test

final composite actions mint test #587

Workflow file for this run

name: pr
on:
push:
branches:
- "pull-request/[0-9]+"
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
pr-builder:
needs:
- checks
- conda-cpp-build
- conda-python-build
- conda-python-tests
- docs-build
- wheel-build
- wheel-tests
- mint-token
- wheel-publish
secrets: inherit
uses: rapidsai/shared-workflows/.github/workflows/[email protected]
checks:
secrets: inherit
uses: rapidsai/shared-workflows/.github/workflows/[email protected]
conda-cpp-build:
needs: checks
secrets: inherit
uses: rapidsai/shared-workflows/.github/workflows/[email protected]
with:
build_type: pull-request
conda-python-build:
needs: conda-cpp-build
secrets: inherit
uses: rapidsai/shared-workflows/.github/workflows/[email protected]
with:
build_type: pull-request
conda-python-tests:
needs: conda-python-build
secrets: inherit
uses: rapidsai/shared-workflows/.github/workflows/[email protected]
with:
build_type: pull-request
docs-build:
needs: conda-python-build
secrets: inherit
uses: rapidsai/shared-workflows/.github/workflows/[email protected]
with:
build_type: pull-request
node_type: "gpu-v100-latest-1"
arch: "amd64"
container_image: "rapidsai/ci-conda:latest"
run_script: "ci/build_docs.sh"
wheel-build:
needs: checks
secrets: inherit
uses: rapidsai/shared-workflows/.github/workflows/[email protected]
with:
build_type: pull-request
script: ci/build_wheel.sh
wheel-tests:
needs: wheel-build
secrets: inherit
uses: rapidsai/shared-workflows/.github/workflows/[email protected]
with:
build_type: pull-request
script: ci/test_wheel.sh
mint-token:
runs-on: ubuntu-latest
permissions:
id-token: write
needs: wheel-build
steps:
# - name: mint API token
# run: |
# #!/bin/bash
# # retrieve the ambient OIDC token
# resp=$(curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \
# "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=pypi")
# oidc_token=$(jq -r '.value' <<< "${resp}")
# echo "OIDC token: $oidc_token"
# echo "Response: $resp"
# # exchange the OIDC token for an API token
# resp=$(curl -X POST https://test.pypi.org/_/oidc/mint-token -d "{\"token\": \"${oidc_token}\"}")
# echo "OIDC token: $oidc_token"
# echo "Response: $resp"
# api_token=$(jq -r '.token' <<< "${resp}")
# # mask the newly minted API token, so that we don't accidentally leak it
# echo "::add-mask::${api_token}"
# # see the next step in the workflow for an example of using this step output
# echo "api-token=${api_token}" >> "${GITHUB_OUTPUT}"
- name: Mint GitHub Token
uses: rapidsai/shared-actions/mint-pypi-token@mint-pypi-token
id: mint-token
wheel-publish:
needs: [wheel-build, mint-token]
secrets: inherit
uses: rapidsai/shared-workflows/.github/workflows/wheels-publish.yaml@test_pypi_trusted_publish
with:
build_type: pull-request
branch: ${{ inputs.branch }}
sha: ${{ inputs.sha }}
date: ${{ inputs.date }}
package-name: cucim