.github/workflows/trigger-dotcom-hotfix.yml - main - githubmirror/tldraw

.github/workflows/trigger-dotcom-hotfix.yml

60 строк2 KB

Steve Ruiz

fix(ci): add persist-credentials: false to remaining checkout v6 workflows (#8273)

18 мар 2026, 18:24

18 мар 2026, 18:241e055ff

name: Trigger dotcom hotfix

on:
  push:
    branches:
      - main
  pull_request:
    types: [labeled]

defaults:
  run:
    shell: bash

permissions:
  contents: write
  pull-requests: write

jobs:
  trigger:
    name: Trigger a dotcom hotfix
    runs-on: ubuntu-latest
    timeout-minutes: 20
    concurrency: dotcom-hotfix
    environment: npm deploy
    if: |
      github.event_name == 'push' ||
      (github.event_name == 'pull_request' && 
       github.event.pull_request.merged == true && 
       github.event.label.name == 'dotcom-hotfix-please')

    steps:
      - name: Generate a token
        id: generate_token
        uses: actions/create-github-app-token@v2
        with:
          app-id: ${{ secrets.HUPPY_APP_ID }}
          private-key: ${{ secrets.HUPPY_APP_PRIVATE_KEY }}

      - uses: actions/checkout@v6
        with:
          persist-credentials: false
          token: ${{ steps.generate_token.outputs.token }}
          fetch-depth: 0

      - name: Configure git credentials
        run: git config --global url."https://x-access-token:${{ steps.generate_token.outputs.token }}@github.com/".insteadOf "https://github.com/"

      - uses: ./.github/actions/setup

      - name: Maybe trigger dotcom hotfix
        run: |
          set -e
          git config --global user.name 'huppy-bot[bot]'
          git config --global user.email '128400622+huppy-bot[bot]@users.noreply.github.com'
          git log --oneline -10
          yarn tsx internal/scripts/trigger-dotcom-hotfix.ts
        env:
          GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
          DISCORD_DEPLOY_WEBHOOK_URL: ${{ secrets.DISCORD_DEPLOY_WEBHOOK_URL }}
          PR_NUMBER: ${{ github.event.pull_request.number }}