Merge branch 'develop' of github.com:LedgerHQ/ledger-live into develop

* 'develop' of github.com:LedgerHQ/ledger-live:
  ci: control whether to run actions on our own hosted runners based on the pr being a fork

.github/workflows/build-desktop.yml

@@ -21,18 +21,17 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  is-org-member:
-    name: "Check Org Member"
-    uses: ledgerhq/ledger-live/.github/workflows/is-org-member.yml@develop
+  pr-is-fork:
+    name: "Check if the PR is a fork"
+    uses: ./.github/workflows/pr-is-fork.yml
     with:
-      username: ${{ github.actor }}
-      organisation: ledgerhq
+      non-pr-result: true
     secrets:
       token: ${{ secrets.COMMON_READ_ORG }}
 
   start-runner:
-    needs: [is-org-member]
-    if: ${{ fromJSON(needs.is-org-member.outputs.is-org-member) }}
+    needs: [pr-is-fork]
+    if: ${{ !fromJSON(needs.pr-is-fork.outputs.pr-is-fork) }}
     name: "start ec2 instance"
     uses: ledgerhq/ledger-live/.github/workflows/start-linux-runner.yml@develop
     with:
@@ -42,8 +41,8 @@ jobs:
 
   stop-runner:
     name: "stop ec2 instance"
-    if: ${{ always() && needs.start-runner.result == 'success' && fromJSON(needs.is-org-member.outputs.is-org-member) }}
-    needs: [is-org-member, start-runner, build-desktop-app-linux]
+    if: ${{ always() && needs.start-runner.result == 'success' && !fromJSON(needs.pr-is-fork.outputs.pr-is-fork) }}
+    needs: [pr-is-fork, start-runner, build-desktop-app-linux]
     uses: ledgerhq/ledger-live/.github/workflows/stop-linux-runner.yml@develop
     with:
       label: ${{ needs.start-runner.outputs.label }}
@@ -53,8 +52,8 @@ jobs:
 
   build-desktop-app-linux:
     name: "Build Ledger Live Desktop (Linux)"
-    if: ${{ fromJSON(needs.is-org-member.outputs.is-org-member) }}
-    needs: [is-org-member, start-runner]
+    if: ${{ !fromJSON(needs.pr-is-fork.outputs.pr-is-fork) }}
+    needs: [pr-is-fork, start-runner]
     runs-on: ${{ needs.start-runner.outputs.label }}
     env:
       NODE_OPTIONS: "--max-old-space-size=7168"
@@ -102,8 +101,8 @@ jobs:
 
   build-desktop-app-linux-external:
     name: "Build Ledger Live Desktop (Linux)"
-    if: ${{ !fromJSON(needs.is-org-member.outputs.is-org-member) }}
-    needs: [is-org-member]
+    if: ${{ fromJSON(needs.pr-is-fork.outputs.pr-is-fork) }}
+    needs: [pr-is-fork]
     runs-on: ubuntu-latest
     env:
       NODE_OPTIONS: "--max-old-space-size=7168"

.github/workflows/build-mobile.yml

@@ -18,18 +18,17 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  is-org-member:
-    name: "Check Org Member"
-    uses: ledgerhq/ledger-live/.github/workflows/is-org-member.yml@develop
+  pr-is-fork:
+    name: "Check if the PR is a fork"
+    uses: ./.github/workflows/pr-is-fork.yml
     with:
-      username: ${{ github.actor }}
-      organisation: ledgerhq
+      non-pr-result: true
     secrets:
       token: ${{ secrets.COMMON_READ_ORG }}
 
   start-runner:
-    needs: [is-org-member]
-    if: ${{ fromJSON(needs.is-org-member.outputs.is-org-member) }}
+    needs: [pr-is-fork]
+    if: ${{ !fromJSON(needs.pr-is-fork.outputs.pr-is-fork) }}
     name: "start ec2 instance"
     uses: ledgerhq/ledger-live/.github/workflows/start-linux-runner.yml@develop
     with:
@@ -50,8 +49,8 @@ jobs:
 
   build-mobile-app-android:
     name: "Build Ledger Live Mobile (Android)"
-    if: ${{ fromJSON(needs.is-org-member.outputs.is-org-member) }}
-    needs: [is-org-member, start-runner]
+    if: ${{ !fromJSON(needs.pr-is-fork.outputs.pr-is-fork) }}
+    needs: [pr-is-fork, start-runner]
     runs-on: ${{ needs.start-runner.outputs.label }}
     env:
       NODE_OPTIONS: "--max-old-space-size=7168"
@@ -130,8 +129,8 @@ jobs:
 
   build-mobile-app-android-external:
     name: "Build Ledger Live Mobile (Android)"
-    if: ${{ !fromJSON(needs.is-org-member.outputs.is-org-member) }}
-    needs: [is-org-member]
+    if: ${{ fromJSON(needs.pr-is-fork.outputs.pr-is-fork) }}
+    needs: [pr-is-fork]
     runs-on: ubuntu-latest
     env:
       NODE_OPTIONS: "--max-old-space-size=7168"

.github/workflows/pr-is-fork.yml

@@ -0,0 +1,49 @@
+name: Check Fork
+on:
+  workflow_call:
+    inputs:
+      owner:
+        type: string
+        description: owner of the repository
+        required: false
+      repo:
+        type: string
+        description: name of the repository
+        required: false
+      pull_number:
+        type: string
+        description: the pull request number
+        required: false
+      non-pr-result:
+        type: string
+        description: if set, will return this result when the action has not been trigger by a pull_request event
+        required: false
+    secrets:
+      TOKEN:
+        required: true
+    outputs:
+      pr-is-fork:
+        description: returns true if the pr is a fork, false otherwise
+        value: ${{ jobs.pr-is-fork.outputs.pr-is-fork }}
+
+jobs:
+  pr-is-fork:
+    runs-on: ubuntu-latest
+    outputs:
+      pr-is-fork: ${{ steps.pr-is-fork.outputs.pr-is-fork }}
+    steps:
+      - name: check inputs
+        run: |
+          echo 'owner: ${{ inputs.owner }}'
+          echo 'repo: ${{ inputs.repo }}'
+          echo 'pull_number: ${{ inputs.pull_number }}'
+          echo 'non-pr-result: ${{ inputs.non-pr-result }}'
+      - uses: actions/checkout@v3
+      - uses: ./tools/actions/pr-is-fork
+        id: pr-is-fork
+        with:
+          owner: ${{ inputs.owner }}
+          repo: ${{ inputs.repo }}
+          pull_number: ${{ inputs.pull_number }}
+          non-pr-result: ${{ inputs.non-pr-result }}
+          token: ${{ secrets.TOKEN }}

.github/workflows/test-desktop.yml

@@ -15,6 +15,14 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  pr-is-fork:
+    name: "Check if the PR is a fork"
+    uses: ./.github/workflows/pr-is-fork.yml
+    with:
+      non-pr-result: true
+    secrets:
+      token: ${{ secrets.COMMON_READ_ORG }}
+
   typecheck:
     name: "Ledger Live Desktop TypeCheck"
     env:
@@ -44,27 +52,18 @@ jobs:
       - name: Run code checkers
         run: pnpm desktop test:codecheck
 
-  is-org-member:
-    name: "Check Org Member"
-    uses: ledgerhq/ledger-live/.github/workflows/is-org-member.yml@develop
-    with:
-      username: ${{ github.actor }}
-      organisation: ledgerhq
-    secrets:
-      token: ${{ secrets.COMMON_READ_ORG }}
-
   matrix_prep:
-    needs: [is-org-member]
+    needs: [pr-is-fork]
     runs-on: ubuntu-latest
     outputs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
       - id: set-matrix
         run: |
-          if [[ "${{ needs.is-org-member.outputs.is-org-member }}" == "true" ]]; then
-            echo "::set-output name=matrix::{\"os\": [\"ubuntu-latest\", \"windows-latest\"]}"
-          else
+          if [[ "${{ needs.pr-is-fork.outputs.pr-is-fork }}" == "true" ]]; then
             echo "::set-output name=matrix::{\"os\": [\"ubuntu-latest\", \"windows-latest\", \"macos-latest\"]}"
+          else
+            echo "::set-output name=matrix::{\"os\": [\"ubuntu-latest\", \"windows-latest\"]}"
           fi
 
   test-desktop-app:
@@ -113,9 +112,8 @@ jobs:
 
   test-desktop-app-mac-internal:
     name: "Ledger Live Desktop Tests (macos-latest)"
-    needs:
-      - is-org-member
-    if: ${{ fromJSON(needs.is-org-member.outputs.is-org-member) }}
+    needs: [pr-is-fork]
+    if: ${{ !fromJSON(needs.pr-is-fork.outputs.pr-is-fork) }}
     runs-on: [ledger-live, macos]
     env:
       NODE_OPTIONS: "--max-old-space-size=7168"

tools/actions/pr-is-fork/action.yml

@@ -0,0 +1,30 @@
+name: pr-is-fork
+description: check if a pr is a fork
+author: elbywan
+inputs:
+  owner:
+    description: owner of the repository
+    required: false
+  repo:
+    description: name of the repository
+    required: false
+  pull_number:
+    description: the pull request number
+    required: false
+  non-pr-result:
+    description: if set, will return this result when the action has not been trigger by a pull_request event
+    required: false
+  token:
+    description: github token
+    required: true
+outputs:
+  pr-is-fork:
+    description: returns true if the pr is a fork, false otherwise
+
+runs:
+  using: node16
+  main: build/index.js
+
+branding:
+  icon: user-check
+  color: yellow