FilesExpand file tree

main

/

sync-main.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

91 lines (87 loc) · 3.19 KB

main

/

sync-main.yml

Copy path

Top

File metadata and controls

• Code
• Blame

91 lines (87 loc) · 3.19 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

name: Sync Main

on:

push:

branches:

- main

paths:

- .github/workflows/sync-main.yml

schedule:

- cron: '55 * * * *'

jobs:

sync-main:

name: Sync-main

runs-on: ubuntu-latest

if: github.repository == 'microsoft/codeql'

permissions:

contents: write

pull-requests: write

steps:

- name: Checkout

uses: actions/checkout@v3

with:

fetch-depth: 0

token: ${{ secrets.WORKFLOW_TOKEN }}

- name: Git config

shell: bash

run: |

git config user.name "dilanbhalla"

git config user.email "dilanbhalla@microsoft.com"

- name: Git checkout auto/sync-main-pr

shell: bash

run: |

git fetch origin

if git ls-remote --exit-code --heads origin auto/sync-main-pr > /dev/null; then

echo "Branch exists remotely. Checking it out."

git checkout -B auto/sync-main-pr origin/auto/sync-main-pr

else

echo "Branch does not exist remotely. Creating from main."

git checkout -B auto/sync-main-pr origin/main

git push -u origin auto/sync-main-pr

fi

- name: Sync origin/main

shell: bash

run: |

echo "::group::Sync with main branch"

git pull origin auto/sync-main-pr; exitCode=$?; if [ $exitCode -ne 0 ]; then exitCode=0; fi

git pull origin main --no-rebase

git push --force origin auto/sync-main-pr

echo "::endgroup::"

- name: Sync upstream/codeql-cli/latest

shell: bash

run: |

echo "::group::Set up remote"

git remote add upstream https://github.com/github/codeql.git

git fetch upstream --tags --force

echo "::endgroup::"

echo "::group::Merge codeql-cli/latest"

set -x

git merge codeql-cli/latest

set +x

echo "::endgroup::"

- name: Push sync branch

run: |

git push origin auto/sync-main-pr

env:

GITHUB_TOKEN: ${{ secrets.WORKFLOW_TOKEN }}

GH_TOKEN: ${{ secrets.WORKFLOW_TOKEN }}

- name: Create PR if it doesn't exist

shell: bash

run: |

pr_number=$(gh pr list --repo microsoft/codeql --head auto/sync-main-pr --base main --json number --jq '.[0].number')

if [ -n "$pr_number" ]; then

echo "PR from auto/sync-main-pr to main already exists (PR #$pr_number). Exiting gracefully."

else

if git fetch origin main auto/sync-main-pr && [ -n "$(git rev-list origin/main..origin/auto/sync-main-pr)" ]; then

echo "PR does not exist. Creating one..."

gh pr create --repo microsoft/codeql --fill -B main -H auto/sync-main-pr \

--label 'autogenerated' \

--title 'Sync Main (autogenerated)' \

--body "This PR syncs the latest changes from \`codeql-cli/latest\` into \`main\`." \

--reviewer 'MathiasVP' \

--reviewer 'ropwareJB'

else

echo "No changes to sync from auto/sync-main-pr to main. Exiting gracefully."

fi

fi

env:

GH_TOKEN: ${{ secrets.WORKFLOW_TOKEN }}