Files
stack/.gitea/workflows/infra-ci.yml
kert f6f47b9a13
Some checks failed
CI / skinny-install (aco) (push) Successful in 44s
CI / lint-test (push) Failing after 1m27s
CI / skinny-install (api) (push) Successful in 51s
CI / skinny-install (bcda) (push) Successful in 32s
CI / skinny-install (bib) (push) Successful in 28s
CI / skinny-install (bls) (push) Successful in 28s
CI / skinny-install (ccw) (push) Successful in 26s
CI / skinny-install (cli) (push) Successful in 32s
CI / skinny-install (cms) (push) Successful in 27s
CI / skinny-install (conf) (push) Successful in 30s
CI / skinny-install (perf) (push) Successful in 33s
CI / skinny-install (pfs) (push) Successful in 31s
CI / skinny-install (rex) (push) Successful in 30s
Infra CI / notebooks (push) Successful in 7s
Infra CI / zotero (push) Successful in 6s
Deploy / build-scan-report (push) Has been cancelled
Infra CI / mc (push) Has been cancelled
Infra CI / api (push) Has been cancelled
Infra CI / docs (push) Has been cancelled
fix: Gitea Actions secrets — DEPLOY_TOKEN replaces reserved GITEA_ prefix
Gitea reserves the GITEA_ prefix for Actions secrets, so
secrets.GITEA_TOKEN resolved to empty, causing 401 on all package
uploads in pkg-supply-chain workflow.

- Rename CI secret from GITEA_TOKEN to DEPLOY_TOKEN (env var stays
  GITEA_TOKEN for code compatibility)
- Add provision_gitea_actions() to provisioning system — syncs
  DEPLOY_TOKEN, REGISTRY_USER, REGISTRY_TOKEN to Gitea Actions
- Wired into both provision() and bootstrap() flows
- All 7 Gitea Actions workflows updated

Refs #229, refs #230
2026-03-25 00:48:18 -04:00

176 lines
4.9 KiB
YAML

# DO NOT EDIT — generated by gen_config.py from stack.toml
# Re-generate: uv run python dev/scripts/gen_config.py
name: Infra CI
on:
push:
paths:
- 'notebooks/**'
- 'infra/marimo/**'
- 'infra/images/notebooks.Dockerfile'
- 'data/zotero/**'
- 'infra/images/zotero.Dockerfile'
- 'docs/**'
- 'infra/images/docs.Dockerfile'
- 'infra/images/api.Dockerfile'
- 'src/**'
- 'pyproject.toml'
- 'infra/rustfs/**'
- 'infra/images/mc.Dockerfile'
pull_request:
paths:
- 'notebooks/**'
- 'infra/marimo/**'
- 'infra/images/notebooks.Dockerfile'
- 'data/zotero/**'
- 'infra/images/zotero.Dockerfile'
- 'docs/**'
- 'infra/images/docs.Dockerfile'
- 'infra/images/api.Dockerfile'
- 'src/**'
- 'pyproject.toml'
- 'infra/rustfs/**'
- 'infra/images/mc.Dockerfile'
jobs:
notebooks:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: https://github.com/actions/checkout@v4
- name: Hadolint notebooks
uses: https://github.com/hadolint/hadolint-action@v3.1.0
with:
dockerfile: infra/images/notebooks.Dockerfile
- name: Build notebooks
run: docker build -f infra/images/notebooks.Dockerfile -t local/notebooks:build notebooks/
- name: File failure issue
if: failure()
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
uv sync --no-dev --quiet 2>/dev/null || true
uv run python -m api.diag.ci \
--workflow "Infra CI" --job "notebooks" \
--run "${{ github.run_number }}" \
--sha "${{ github.sha }}" \
--ref "${{ github.ref }}" || true
zotero:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: https://github.com/actions/checkout@v4
- name: Hadolint zotero
uses: https://github.com/hadolint/hadolint-action@v3.1.0
with:
dockerfile: infra/images/zotero.Dockerfile
- name: Build zotero
run: docker build -f infra/images/zotero.Dockerfile -t local/zotero:build data/zotero/
- name: File failure issue
if: failure()
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
uv sync --no-dev --quiet 2>/dev/null || true
uv run python -m api.diag.ci \
--workflow "Infra CI" --job "zotero" \
--run "${{ github.run_number }}" \
--sha "${{ github.sha }}" \
--ref "${{ github.ref }}" || true
docs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: https://github.com/actions/checkout@v4
- name: Hadolint docs
uses: https://github.com/hadolint/hadolint-action@v3.1.0
with:
dockerfile: infra/images/docs.Dockerfile
- name: Build docs
run: docker build -f infra/images/docs.Dockerfile -t local/docs:build .
- name: File failure issue
if: failure()
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
uv sync --no-dev --quiet 2>/dev/null || true
uv run python -m api.diag.ci \
--workflow "Infra CI" --job "docs" \
--run "${{ github.run_number }}" \
--sha "${{ github.sha }}" \
--ref "${{ github.ref }}" || true
api:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: https://github.com/actions/checkout@v4
- name: Hadolint api
uses: https://github.com/hadolint/hadolint-action@v3.1.0
with:
dockerfile: infra/images/api.Dockerfile
- name: Build api
run: docker build -f infra/images/api.Dockerfile -t local/api:build .
- name: File failure issue
if: failure()
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
uv sync --no-dev --quiet 2>/dev/null || true
uv run python -m api.diag.ci \
--workflow "Infra CI" --job "api" \
--run "${{ github.run_number }}" \
--sha "${{ github.sha }}" \
--ref "${{ github.ref }}" || true
mc:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: https://github.com/actions/checkout@v4
- name: Hadolint mc
uses: https://github.com/hadolint/hadolint-action@v3.1.0
with:
dockerfile: infra/images/mc.Dockerfile
- name: Build mc
run: docker build -f infra/images/mc.Dockerfile -t local/mc:build infra/rustfs/
- name: File failure issue
if: failure()
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
uv sync --no-dev --quiet 2>/dev/null || true
uv run python -m api.diag.ci \
--workflow "Infra CI" --job "mc" \
--run "${{ github.run_number }}" \
--sha "${{ github.sha }}" \
--ref "${{ github.ref }}" || true