File tree Expand file tree Collapse file tree 1 file changed +40
-0
lines changed
Expand file tree Collapse file tree 1 file changed +40
-0
lines changed Original file line number Diff line number Diff line change 1+ name : GitHub repository metadata exporter
2+ on :
3+ workflow_dispatch :
4+ schedule :
5+ - cron : " 20 7 * * *"
6+
7+ permissions :
8+ id-token : write
9+ contents : read
10+ issues : read
11+ pull-requests : read
12+ security-events : read
13+
14+ jobs :
15+ export-data :
16+ runs-on : ubuntu-latest
17+ steps :
18+ - name : Audit DNS requests
19+ uses : cds-snc/dns-proxy-action@2aee21aebfddefac5839497648a36a9f84342d8b
20+ env :
21+ DNS_PROXY_FORWARDTOSENTINEL : " true"
22+ DNS_PROXY_LOGANALYTICSWORKSPACEID : ${{ secrets.LOG_ANALYTICS_WORKSPACE_ID }}
23+ DNS_PROXY_LOGANALYTICSSHAREDKEY : ${{ secrets.LOG_ANALYTICS_WORKSPACE_KEY }}
24+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
25+ - name : Configure AWS credentials using OIDC
26+ uses : aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
27+ with :
28+ role-to-assume : arn:aws:iam::739275439843:role/data-lake-github-data-export
29+ role-session-name : GithubDataExport
30+ aws-region : ca-central-1
31+ - name : Export Data
32+ uses : cds-snc/github-repository-metadata-exporter@531ae86f67b4c0aa1a40229571211ef73109bda2
33+ with :
34+ github-app-id : ${{ secrets.SRE_BOT_RO_APP_ID }}
35+ github-app-installation-id : ${{ secrets.SRE_BOT_RO_INSTALLATION_ID }}
36+ github-app-private-key : ${{ secrets.SRE_BOT_RO_PRIVATE_KEY }}
37+ log-analytics-workspace-id : ${{ secrets.LOG_ANALYTICS_WORKSPACE_ID }}
38+ log-analytics-workspace-key : ${{ secrets.LOG_ANALYTICS_WORKSPACE_KEY }}
39+ s3-bucket : ${{ secrets.DATA_LAKE_GITHUB_METADATA_EXPORT_S3_BUCKET }}
40+ aws-region : ${{ secrets.DATA_LAKE_GITHUB_METADATA_EXPORT_AWS_REGION }}
You can’t perform that action at this time.
0 commit comments