Skip to content

Add required test for rekor-monitor (#502) #105

Add required test for rekor-monitor (#502)

Add required test for rekor-monitor (#502) #105

name: sync-changes-sigstore
on:
workflow_dispatch:
inputs:
preview:
description: "Dry run of the Pulumi changes"
required: false
default: false
type: boolean
push:
branches:
- main
paths:
- 'github-sync/github-data/sigstore/*.yaml'
- 'github-sync/Pulumi.github-prod.yaml'
env:
PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
GITHUB_OWNER: sigstore
jobs:
Update:
name: sync-changes-sigstore
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
- uses: sigstore/github-sync@main
if: ${{ inputs.preview }}
with:
work_dir: ./github-sync
config_directory: ./github-sync/github-data
stack_name: sigstore/github-prod
pulumi_access_token: ${{ secrets.PULUMI_ACCESS_TOKEN }}
pulumi_command: preview
gh_token: ${{ secrets.GITHUB_TOKEN }}
- uses: sigstore/github-sync@main
if: ${{ !inputs.preview }}
with:
work_dir: ./github-sync
config_directory: ./github-sync/github-data
stack_name: sigstore/github-prod
pulumi_access_token: ${{ secrets.PULUMI_ACCESS_TOKEN }}
pulumi_command: up
gh_token: ${{ secrets.GITHUB_TOKEN }}