WFCORE-6697: fix resource location check #2829
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependency Tree Input Builder | |
| # To deal with https://securitylab.github.com/research/github-actions-preventing-pwn-requests | |
| # we need to split this across two jobs. The part that writes to the pull request lives in | |
| # ./dep-diff-workflow_run.yml | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| env: | |
| # The modules to check for dependencies. If there is more than one they are comma separated | |
| MODULES_TO_CHECK: testbom,core-feature-pack/common | |
| jobs: | |
| check: | |
| runs-on: ubuntu-latest | |
| env: | |
| ARTIFACTS: .pr_artifacts | |
| steps: | |
| - name: Prepare | |
| id: prepare | |
| run: | | |
| # Make ARTIFACTS absolute | |
| ARTIFACTS="${GITHUB_WORKSPACE}/${ARTIFACTS}" | |
| echo "ARTIFACTS=${ARTIFACTS}" >> $GITHUB_ENV | |
| mkdir ${ARTIFACTS} | |
| echo ${{ github.event.number }} > "${ARTIFACTS}/pr" | |
| echo "base=${GITHUB_BASE_REF}" >> $GITHUB_OUTPUT | |
| echo "artifacts=${ARTIFACTS}" >> $GITHUB_OUTPUT | |
| - name: Clone base version | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ steps.prepare.outputs.base }} | |
| path: base | |
| - name: Setup Java | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: 'temurin' | |
| java-version: 11 | |
| # Run the caching against the base version only | |
| - name: Cache local Maven repository | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.m2/repository | |
| key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-maven- | |
| - name: Clone PR version | |
| uses: actions/checkout@v4 | |
| with: | |
| path: pr | |
| - name: Build base | |
| working-directory: base | |
| run: | | |
| mvn -B -ntp install -DskipTests -pl $MODULES_TO_CHECK -am | |
| - name: Grab base dependencies | |
| id: base-versions | |
| working-directory: base | |
| run: | | |
| i=0 | |
| baseVersionFiles="" | |
| for module in $(echo "${MODULES_TO_CHECK}" | sed "s/,/ /g") | |
| do | |
| baseVersionFile="_base-versions-$i.txt" | |
| mvn -B -ntp dependency:tree -pl "${module}" -DoutputFile="${ARTIFACTS}/${baseVersionFile}" || exit 1 | |
| if [ $i -gt 0 ]; then | |
| baseVersionFiles="${baseVersionFiles},${baseVersionFile}" | |
| else | |
| baseVersionFiles="${baseVersionFile}" | |
| fi | |
| i=$((i + 1)) | |
| done | |
| echo "${baseVersionFiles}" > ${ARTIFACTS}/baseVersions | |
| - name: Build PR | |
| working-directory: pr | |
| run: | | |
| mvn -B -ntp install -DskipTests -pl $MODULES_TO_CHECK -am | |
| - name: Grab PR Dependencies | |
| working-directory: pr | |
| id: new-versions | |
| run: | | |
| i=0 | |
| newVersionFiles="" | |
| for module in $(echo "${MODULES_TO_CHECK}" | sed "s/,/ /g") | |
| do | |
| newVersionFile="_new-versions-$i.txt" | |
| mvn -B -ntp dependency:tree -pl "${module}" -DoutputFile="${ARTIFACTS}/${newVersionFile}" || exit 1 | |
| if [ $i -gt 0 ]; then | |
| newVersionFiles="${newVersionFiles},${newVersionFile}" | |
| else | |
| newVersionFiles="${newVersionFile}" | |
| fi | |
| i=$((i + 1)) | |
| done | |
| echo "${newVersionFiles}" > ${ARTIFACTS}/newVersions | |
| - uses: actions/upload-artifact@v4 | |
| with: | |
| name: input-artifacts | |
| path: ${{ steps.prepare.outputs.artifacts }} |