production-test.yml

name: Production test

on:
  pull_request:
    types:
      - opened
      - reopened
      - synchronize
      - labeled

jobs:
  build:
    uses: ./.github/workflows/build.yaml
    if: |
      (github.event.action == 'labeled' && github.event.label.name == 'production test')
      || (github.event.action != 'labeled' && contains(github.event.pull_request.labels.*.name, 'production test'))

  production-test:
    needs: build
    runs-on: UbuntuLatest32Cores128G
    timeout-minutes: 5
    if: |
      (github.event.action == 'labeled' && github.event.label.name == 'production test')
      || (github.event.action != 'labeled' && contains(github.event.pull_request.labels.*.name, 'production test'))
    permissions:
      id-token: write # In order to request a JWT for AWS auth
      contents: read # Specifying id-token wiped this out, so manually specify that this action is allowed to checkout this private repo
    steps:
      - uses: actions/checkout@v3

      - uses: DeterminateSystems/nix-installer-action@main

      - uses: DeterminateSystems/magic-nix-cache-action@main
        with:
          use-gha-cache: false

      - uses: actions/download-artifact@v4.1.7
        with:
          name: flakehub-push-X64-Linux
          path: flakehub-push-X64-Linux

      - name: Production test
        if: |
          (github.event.action == 'labeled' && github.event.label.name == 'production test')
          || (github.event.action != 'labeled' && contains(github.event.pull_request.labels.*.name, 'production test'))
        uses: ./
        with:
          visibility: "hidden"
          rolling-minor: 0
          rolling: true
          log-directives: "flakehub_push=trace"
          logger: "pretty"
          flakehub-push-binary: ./flakehub-push-X64-Linux/flakehub-push
          _internal-strict-mode: true