Deploy Latest Checklists #99
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Latest Checklists | |
| on: | |
| push: | |
| branches: | |
| - master | |
| paths: | |
| - 'document/**' | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: 'Version?' | |
| required: false | |
| default: '' | |
| jobs: | |
| create_pr: | |
| name: Create Pull Request | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Setup Action | |
| uses: actions/checkout@v4 | |
| with: | |
| persist-credentials: false | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '20' | |
| - name: Install Dependencies | |
| run: | | |
| sudo apt update | |
| sudo apt install moreutils | |
| - name: Generate JSON Checklist | |
| run: | | |
| npm run-script jsongen | |
| git update-index -q --refresh | |
| if ! git diff-index --quiet HEAD --; then | |
| echo "CHANGED=true" >> $GITHUB_ENV | |
| fi | |
| - name: Setup Python | |
| if: env.CHANGED == 'true' | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.10" | |
| - name: Install Dependencies | |
| run: | | |
| pip install openpyxl pydrive | |
| - name: Run XLSX Build | |
| if: env.CHANGED == 'true' | |
| run: npm run-script xlsxgen | |
| - name: Git Setup Global Config | |
| if: env.CHANGED == 'true' | |
| run: | | |
| # Git setup | |
| export GITHUB_USER=wstgbot | |
| echo "GITHUB_USER=$GITHUB_USER" >> $GITHUB_ENV | |
| echo "GITHUB_TOKEN=${{ secrets.wstg_deploy_token }}" >> $GITHUB_ENV | |
| git config --global user.email "[email protected]" | |
| git config --global user.name $GITHUB_USER | |
| - name: Setup Environment Variables | |
| if: env.CHANGED == 'true' | |
| run : | | |
| # Setup some env vars etc for future use | |
| echo "SRC_BASE="OWASP/wstg@"$(git log -1 --format=format:%h)" >> $GITHUB_ENV | |
| echo "BRANCH_STAMP=$(date +"%Y%m%d%H%M%S")" >> $GITHUB_ENV | |
| echo "SHORT_DATE=$(date +"%Y-%m-%d")" >> $GITHUB_ENV | |
| - name: Create Feature Branch | |
| if: env.CHANGED == 'true' | |
| run: | | |
| # Checkout what will be the new feature branch | |
| git checkout -b $BRANCH_STAMP | |
| - name: Push Feature Branch and Raise PR | |
| if: env.CHANGED == 'true' | |
| run: | | |
| # If there are changes: add, commit, PR | |
| git add checklists/ | |
| if ! git diff-index --quiet HEAD --; then | |
| git remote set-url origin https://$GITHUB_USER:${{ secrets.wstg_deploy_token }}@github.com/OWASP/wstg.git | |
| git commit -m "Publish Latest checklists $SHORT_DATE" -m "Updates based on $SRC_BASE" | |
| git push --set-upstream origin $BRANCH_STAMP | |
| gh pr create -R OWASP/wstg --fill | |
| fi | |
| - name: Set XLSX Publishing Secrets | |
| run: | | |
| echo "$GDRIVECREDSFILE" | base64 -d > credentials.json | |
| echo "$GDRIVESETTINGSFILE" | base64 -d > settings.yaml | |
| shell: bash | |
| env: | |
| GDRIVECREDSFILE: ${{ secrets.GDRIVECREDSFILE }} | |
| GDRIVESETTINGSFILE: ${{ secrets.GDRIVESETTINGSFILE }} | |
| - name: Publish XLSX file to Google Drive | |
| run: | | |
| npm run-script publishxlsx -- ${{ secrets.GDRIVEFILEID }} ${{ github.event.inputs.version }} | |