ScubaGear/.github/workflows/run_workflow_pipeline.yaml at 6b8361537dc08bc39d69076199d504c9f972e60a · cisagov/ScubaGear · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
# Purpose:  Run the workflow pipeline that tests code in the other workflows.
# Note:  This pipeline is a work in progress.  At the moment, it is only doing unit testing.  Eventually, it should also do linting, security checking, etc. but only for the workflow code.

name: Run the Workflow Pipeline

on:
  push:
    paths:
      - '.github/workflows/**'
      - '.github/actions/extract-email/action.yaml'
      - 'Testing/workflow/**'
      - 'Testing/action/**'
      - 'utils/workflow/**'
      - 'utils/action/**'
  pull_request:
  workflow_dispatch:

permissions: read-all

jobs:
  # Lint and Syntax Checks
  lint-yaml:
    name: Lint
    uses: ./.github/workflows/lint_yaml.yaml
  lint-powershell:
    name: Lint
    uses: ./.github/workflows/lint_powershell.yaml
  # Security Checks
  scan-secret:
    name: Security
    needs:
      - lint-yaml
      - lint-powershell
    uses: ./.github/workflows/run_secret_scan.yaml
  check-security:
    name: Security
    needs:
      - lint-yaml
      - lint-powershell
    uses: ./.github/workflows/check_security.yaml
  # Unit Tests
  unit-powershell:
    name: Unit
    needs:
      - scan-secret
      - check-security
    uses: ./.github/workflows/unit_test_powershell.yaml
  unit-workflow:
    name: Unit
    needs:
      - scan-secret
      - check-security
    uses: ./.github/workflows/unit_test_workflows.yaml