Sync checks and policies #5
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Sync checks and policies | |
| on: | |
| # Manually trigger the workflow | |
| workflow_dispatch: | |
| permissions: | |
| # We will create a pull request, so we need write permissions | |
| pull-requests: write | |
| # We will be committing to the repository, so we need write permissions | |
| contents: write | |
| jobs: | |
| sync-and-update: | |
| runs-on: ubuntu-latest | |
| services: | |
| postgres: | |
| image: postgres:17.2 | |
| env: | |
| POSTGRES_DB: dashboard | |
| POSTGRES_USER: visionBoard | |
| POSTGRES_PASSWORD: password | |
| ports: | |
| - 5432:5432 | |
| options: >- | |
| --health-cmd="pg_isready -U visionBoard" | |
| --health-interval=10s | |
| --health-timeout=5s | |
| --health-retries=5 | |
| steps: | |
| - name: Checkout Repository | |
| uses: actions/checkout@v4 | |
| - name: Create or Checkout Branch (chore/update-content) | |
| run: | | |
| git fetch origin chore/update-content || true | |
| git checkout chore/update-content || git checkout -b chore/update-content | |
| - name: Clone visionBoard and import checks | |
| run: | | |
| git clone https://github.com/OpenPathfinder/visionBoard.git temp-visionBoard | |
| cd temp-visionBoard | |
| npm install | |
| npm run db:migrate | |
| mkdir -p output | |
| npm run db:export-checks | |
| cp output/checks.json ../data/checks.json | |
| cd .. | |
| rm -rf temp-visionBoard | |
| env: | |
| PGHOST: localhost | |
| PGUSER: visionBoard | |
| PGPASSWORD: password | |
| PGDATABASE: dashboard | |
| - name: Debug Git Changes | |
| run: | | |
| git status | |
| git diff | |
| - name: Commit Updated Checks | |
| run: | | |
| git config user.name "GitHub Actions" | |
| git config user.email "actions@github.com" | |
| git add -A | |
| git diff --cached --quiet || git commit -m "chore: sync with visionBoard Checks" | |
| - name: Clone fortSphere and import policies | |
| run: | | |
| git clone https://github.com/OpenPathfinder/fortSphere.git temp-fortSphere | |
| cd temp-fortSphere | |
| npm install | |
| mkdir -p output | |
| npm run export-policies | |
| cp output/policies.json ../data/policies.json | |
| cd .. | |
| rm -rf temp-fortSphere | |
| - name: Debug Git Changes | |
| run: | | |
| git status | |
| git diff | |
| - name: Commit Updated Policies | |
| run: | | |
| git config user.name "GitHub Actions" | |
| git config user.email "actions@github.com" | |
| git add -A | |
| git diff --cached --quiet || git commit -m "chore: sync with fortSphere Policies" | |
| - name: Install Dependencies and update dynamic content | |
| run: | | |
| npm install | |
| npm run populate-checks | |
| npm run populate-policies | |
| - name: Debug Git Changes | |
| run: | | |
| git status | |
| git diff | |
| - name: Commit and Push Changes | |
| run: | | |
| git config user.name "GitHub Actions" | |
| git config user.email "actions@github.com" | |
| git add -A | |
| git diff --cached --quiet || git commit -m "chore: auto-update content" | |
| git push origin chore/update-content | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Create and Assign Pull Request | |
| run: | | |
| gh pr create \ | |
| --base main \ | |
| --head chore/update-content \ | |
| --title "[AUTO] Sync with dashboard database" \ | |
| --body "This PR updates the content based on the current state of the Dashboard." \ | |
| --assignee "${{ github.actor }}" \ | |
| --reviewer "${{ github.actor }}" | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |