eps-update-devcontainer/.github/workflows/pull_request.yml at main · NHSDigital/eps-update-devcontainer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
name: pull_request

on:
    pull_request:
        branches: [ main ]
permissions: {}
jobs:
    get_config_values:
        uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
        permissions:
            attestations: "read"
            contents: "read"
            packages: "read"
        with:
            verify_published_from_main_image: false

    dependabot-auto-approve-and-merge:
        uses: NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
        permissions:
            contents: "write"
            pull-requests: "write"
        secrets:
            AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
            AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}

    quality_checks:
        uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
        needs: [ get_config_values ]
        permissions:
            contents: "read"
            packages: "read"
            id-token: "write"
        with:
            pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
        secrets:
            SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

    pr_title_format_check:
        uses: NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
        permissions:
            pull-requests: "write"

    tag_release:
        needs: [ get_config_values ]
        uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
        permissions:
            id-token: "write"
            contents: "write"
            packages: "write"
        with:
            dry_run: true
            pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
            branch_name: ${{ github.event.pull_request.head.ref }}
            tag_format: ${{ needs.get_config_values.outputs.tag_format }}