mirror of
https://github.com/penpot/penpot.git
synced 2026-10-03 01:06:14 +00:00
fa3e01f7c7
Set persist-credentials: false on every actions/checkout step, so the job token is not left in .git/config for the rest of the job. No step after checkout pushes or fetches with it. The only authenticated operation, gh release in release.yml, uses GH_TOKEN. Signed-off-by: David Barragán Merino <david.barragan@kaleidos.net>
146 lines
4.9 KiB
YAML
146 lines
4.9 KiB
YAML
name: Plugins/packages deployer
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- develop
|
|
- staging
|
|
- main
|
|
paths:
|
|
- 'plugins/apps/*-plugin/**'
|
|
- 'libs/plugins-styles/**'
|
|
workflow_dispatch:
|
|
inputs:
|
|
gh_ref:
|
|
description: 'Name of the branch'
|
|
type: choice
|
|
required: true
|
|
default: 'develop'
|
|
options:
|
|
- develop
|
|
- staging
|
|
- main
|
|
|
|
jobs:
|
|
detect-changes:
|
|
runs-on: ubuntu-latest
|
|
outputs:
|
|
colors_to_tokens: ${{ steps.filter.outputs.colors_to_tokens }}
|
|
create_palette: ${{ steps.filter.outputs.create_palette }}
|
|
lorem_ipsum: ${{ steps.filter.outputs.lorem_ipsum }}
|
|
rename_layers: ${{ steps.filter.outputs.rename_layers }}
|
|
contrast: ${{ steps.filter.outputs.contrast }}
|
|
icons: ${{ steps.filter.outputs.icons }}
|
|
poc_state: ${{ steps.filter.outputs.poc_state }}
|
|
table: ${{ steps.filter.outputs.table }}
|
|
# [For new plugins]
|
|
# Add more outputs here
|
|
steps:
|
|
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
|
|
with:
|
|
persist-credentials: false
|
|
- id: filter
|
|
uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
|
|
with:
|
|
filters: |
|
|
colors_to_tokens:
|
|
- 'plugins/apps/colors-to-tokens-plugin/**'
|
|
- 'libs/plugins-styles/**'
|
|
contrast:
|
|
- 'plugins/apps/contrast-plugin/**'
|
|
- 'libs/plugins-styles/**'
|
|
create_palette:
|
|
- 'plugins/apps/create-palette-plugin/**'
|
|
- 'libs/plugins-styles/**'
|
|
icons:
|
|
- 'plugins/apps/icons-plugin/**'
|
|
- 'libs/plugins-styles/**'
|
|
lorem_ipsum:
|
|
- 'plugins/apps/lorem-ipsum-plugin/**'
|
|
- 'libs/plugins-styles/**'
|
|
rename_layers:
|
|
- 'plugins/apps/rename-layers-plugin/**'
|
|
- 'libs/plugins-styles/**'
|
|
table:
|
|
- 'plugins/apps/table-plugin/**'
|
|
- 'libs/plugins-styles/**'
|
|
# [For new plugins]
|
|
# Add more plugin filters here
|
|
# another_plugin:
|
|
# - 'plugins/apps/another-plugin/**'
|
|
# - 'libs/plugins-styles/**'
|
|
|
|
colors-to-tokens-plugin:
|
|
needs: detect-changes
|
|
if: github.event_name == 'workflow_dispatch' || needs.detect-changes.outputs.colors_to_tokens == 'true'
|
|
uses: ./.github/workflows/plugins-deploy-package.yml
|
|
secrets: inherit
|
|
with:
|
|
gh_ref: "${{ inputs.gh_ref || github.ref_name }}"
|
|
plugin_name: colors-to-tokens
|
|
|
|
contrast-plugin:
|
|
needs: detect-changes
|
|
if: github.event_name == 'workflow_dispatch' || needs.detect-changes.outputs.contrast == 'true'
|
|
uses: ./.github/workflows/plugins-deploy-package.yml
|
|
secrets: inherit
|
|
with:
|
|
gh_ref: "${{ inputs.gh_ref || github.ref_name }}"
|
|
plugin_name: contrast
|
|
|
|
create-palette-plugin:
|
|
needs: detect-changes
|
|
if: github.event_name == 'workflow_dispatch' || needs.detect-changes.outputs.create_palette == 'true'
|
|
uses: ./.github/workflows/plugins-deploy-package.yml
|
|
secrets: inherit
|
|
with:
|
|
gh_ref: "${{ inputs.gh_ref || github.ref_name }}"
|
|
plugin_name: create-palette
|
|
|
|
icons-plugin:
|
|
needs: detect-changes
|
|
if: github.event_name == 'workflow_dispatch' || needs.detect-changes.outputs.icons == 'true'
|
|
uses: ./.github/workflows/plugins-deploy-package.yml
|
|
secrets: inherit
|
|
with:
|
|
gh_ref: "${{ inputs.gh_ref || github.ref_name }}"
|
|
plugin_name: icons
|
|
|
|
lorem-ipsum-plugin:
|
|
needs: detect-changes
|
|
if: github.event_name == 'workflow_dispatch' || needs.detect-changes.outputs.lorem_ipsum == 'true'
|
|
uses: ./.github/workflows/plugins-deploy-package.yml
|
|
secrets: inherit
|
|
with:
|
|
gh_ref: "${{ inputs.gh_ref || github.ref_name }}"
|
|
plugin_name: lorem-ipsum
|
|
|
|
rename-layers-plugin:
|
|
needs: detect-changes
|
|
if: github.event_name == 'workflow_dispatch' || needs.detect-changes.outputs.rename_layers == 'true'
|
|
uses: ./.github/workflows/plugins-deploy-package.yml
|
|
secrets: inherit
|
|
with:
|
|
gh_ref: "${{ inputs.gh_ref || github.ref_name }}"
|
|
plugin_name: rename-layers
|
|
|
|
table-plugin:
|
|
needs: detect-changes
|
|
if: github.event_name == 'workflow_dispatch' || needs.detect-changes.outputs.table == 'true'
|
|
uses: ./.github/workflows/plugins-deploy-package.yml
|
|
secrets: inherit
|
|
with:
|
|
gh_ref: "${{ inputs.gh_ref || github.ref_name }}"
|
|
plugin_name: table
|
|
|
|
# [For new plugins]
|
|
# Add more jobs for other plugins below, following the same pattern
|
|
# another-plugin:
|
|
# needs: detect-changes
|
|
# if: github.event_name == 'workflow_dispatch' || needs.detect-changes.outputs.another_plugin == 'true'
|
|
# uses: ./.github/workflows/plugins-deploy-package.yml
|
|
# secrets: inherit
|
|
# with:
|
|
# gh_ref: "${{ inputs.gh_ref || github.ref_name }}"
|
|
# plugin_name: another
|