mirror of
https://github.com/apache/airflow.git
synced 2026-11-04 15:19:48 +00:00
Jarek Potiuk
a5ab822160
Contributors enable Actions on their forks for fork CI (AIP-120), and every cron in the repository then fires there as well. Unguarded scheduled workflows ran CodeQL and the maintenance jobs daily in each fork, using the contributor's minutes; GitHub has started disabling Actions on such forks as wasted compute. Generated-by: Claude Opus 5
81 lines
3.0 KiB
YAML
81 lines
3.0 KiB
YAML
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
---
|
|
name: Java SDK dependency security
|
|
|
|
on: # yamllint disable-line rule:truthy
|
|
push:
|
|
branches:
|
|
- main
|
|
paths:
|
|
- "java-sdk/**"
|
|
- ".github/workflows/java-sdk-dependency-security.yml"
|
|
schedule:
|
|
- cron: "23 4 * * 1"
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: java-sdk-dependency-security-${{ github.event_name }}-${{ github.ref }}
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
dependency-submission:
|
|
name: Submit resolved Gradle dependencies
|
|
if: github.event_name != 'schedule' || github.repository == 'apache/airflow'
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
persist-credentials: false
|
|
# 11: toolchain for the main build and example/
|
|
# 17: toolchain for scala_spark_example/
|
|
# 21: runs Gradle itself — the last entry listed is the one that sets JAVA_HOME
|
|
- name: Install JDK toolchains
|
|
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
|
|
with:
|
|
distribution: temurin
|
|
java-version: |
|
|
11
|
|
17
|
|
21
|
|
- name: Publish the SDK for standalone example resolution
|
|
working-directory: java-sdk
|
|
run: ./gradlew --no-daemon publishToMavenLocal -PskipSigning=true
|
|
- name: Submit main build dependency graph
|
|
uses: gradle/actions/dependency-submission@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
|
|
with:
|
|
build-root-directory: java-sdk
|
|
dependency-graph: generate-and-submit
|
|
validate-wrappers: true
|
|
- name: Submit Java example dependency graph
|
|
uses: gradle/actions/dependency-submission@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
|
|
with:
|
|
build-root-directory: java-sdk/example
|
|
dependency-graph: generate-and-submit
|
|
gradle-version: "8.14.5"
|
|
- name: Submit Scala Spark example dependency graph
|
|
uses: gradle/actions/dependency-submission@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
|
|
with:
|
|
build-root-directory: java-sdk/scala_spark_example
|
|
dependency-graph: generate-and-submit
|
|
gradle-version: "8.14.5"
|