Repository navigation
chore(ci): move to consolidated bcgov/actions and actions-openshift - #2882
Draft
DerekRoberts wants to merge 4 commits into
Draft
DerekRoberts wants to merge 4 commits into
DerekRoberts wants to merge 4 commits into
Conversation
DerekRoberts
marked this pull request as ready for review
October 21, 2026 07:01
DerekRoberts
marked this pull request as draft
October 21, 2026 07:03
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
Duplicate inputs invalidate the Analysis workflow, and deployment parameter handling gives newly initialized databases a predictable password.
3 open issues
What changed in this PR
Migrates CI workflows to consolidated, SHA-pinned bcgov actions, preparing for the multiline trigger migration in #2821.
Changes:
- Switches builder, analysis, and deployment actions to consolidated repositories.
- Passes SonarCloud tokens through action inputs.
- Updates documentation references; trigger formats remain unchanged.
| File | Description |
|---|---|
| README.md | Updates action references and upstream Knip configuration paths. |
| .github/workflows/reusable-deploy.yml | Migrates both deployment steps to the consolidated deployer. |
| .github/workflows/pr-open.yml | Migrates the image builder action. |
| .github/workflows/analysis.yml | Migrates analysis actions and SonarCloud token inputs. |
Review effort: Balanced
| sonar_token: ${{ secrets.sonar_token_backend }} | ||
| - uses: bcgov/actions/test-and-analyse@79aefe3a7abb2d0d00b1b3ea4cfbf12727a10638 # v0.9.0 | ||
| with: | ||
| sonar_token: ${{ secrets.sonar_token_backend }} |
| sonar_token: ${{ secrets.sonar_token_frontend }} | ||
| - uses: bcgov/actions/test-and-analyse@79aefe3a7abb2d0d00b1b3ea4cfbf12727a10638 # v0.9.0 | ||
| with: | ||
| sonar_token: ${{ secrets.sonar_token_frontend }} |
| runs-on: ubuntu-26.04 | ||
| steps: | ||
| - uses: bcgov/action-deployer-openshift@e2d60eb9cacceb89c3b97d8dcf0a2c460eea5eab # v4.2.3 | ||
| - uses: bcgov/actions-openshift/deployer@97cb3f8a5a6d134594c85224d3f593e3c0e90647 # v0.4.0 |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Quickstart still uses the separate, older builder, test-and-analyse and deployer actions, which do not support the multiline trigger format.
Moves the workflows to the consolidated, SHA-pinned actions:
bcgov/actions/builderv0.9.0 (pr-open.yml)bcgov/actions/test-and-analysev0.9.0 (analysis.yml);sonar_tokenis now passed as an input, since the consolidated action reads it fromwith:rather than the environmentbcgov/actions-openshift/deployerv0.4.0 (reusable-deploy.yml)README references are updated to match. Trigger formats are unchanged here; that follows in #2821.
Closes #2881