Skip to content

CI

CI #3663

Workflow file for this run

name: CI
on:
schedule:
- cron: '22 4 * * *'
push:
branches: ['main']
pull_request:
branches: ['main']
jobs:
validate-node:

Check failure on line 11 in .github/workflows/ci.yaml

View workflow run for this annotation

GitHub Actions / CI

Invalid workflow file

The workflow is not valid. .github/workflows/ci.yaml (Line: 11, Col: 3): Error calling workflow 'curium-rocks/flows/.github/workflows/node-ts.yml@main'. The nested job 'dependency-review' is requesting 'pull-requests: write', but is only allowed 'pull-requests: none'.
name: 'Validate'
uses: curium-rocks/flows/.github/workflows/node-ts.yml@main
permissions:
contents: read
actions: read
security-events: write
with:
continue-on-prod-vulns: true
secrets:
SONARQUBE_KEY: ${{ secrets.SONARQUBE_KEY }}
build-image:
name: 'Build container image'
uses: curium-rocks/flows/.github/workflows/oci-build-image.yml@main
needs: validate-node
permissions:
contents: read
packages: write
security-events: write
id-token: write
with:
registry: ghcr.io/bryopsida
image_name: patchwork
push_in_pr: true
deploy-container:
needs: build-image
name: 'Helm'
uses: curium-rocks/flows/.github/workflows/helm-qa.yml@main
with:
charts_dir: 'charts'
helm_extra_sets: '--set image.tag=${{ needs.build-image.outputs.build_tag }}'
ct_extra_args: '--all'