Skip to content

Blossom-CI

Blossom-CI #6063

Workflow file for this run

# Copyright (c) 2022-2024, NVIDIA CORPORATION.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# A workflow to trigger ci on hybrid infra (github + self hosted runner)
name: Blossom-CI
on:
issue_comment:
types: [created]
workflow_dispatch:
inputs:
platform:
description: 'runs-on argument'
required: false
args:
description: 'argument'
required: false
jobs:
Authorization:
name: Authorization
runs-on: blossom
outputs:
args: ${{ env.args }}
# This job only runs for pull request comments
if: |
github.event.comment.body == 'build' &&
(
github.actor == 'abellina' ||
github.actor == 'anfeng' ||
github.actor == 'firestarman' ||
github.actor == 'GaryShen2008' ||
github.actor == 'jlowe' ||
github.actor == 'mythrocks' ||
github.actor == 'nartal1' ||
github.actor == 'nvdbaranec' ||
github.actor == 'NvTimLiu' ||
github.actor == 'razajafri' ||
github.actor == 'revans2' ||
github.actor == 'rwlee' ||
github.actor == 'sameerz' ||
github.actor == 'tgravescs' ||
github.actor == 'wbo4958' ||
github.actor == 'wjxiz1992' ||
github.actor == 'sperlingxx' ||
github.actor == 'YanxuanLiu' ||
github.actor == 'hyperbolic2346' ||
github.actor == 'gerashegalov' ||
github.actor == 'ttnghia' ||
github.actor == 'nvliyuan' ||
github.actor == 'res-life' ||
github.actor == 'HaoYang670' ||
github.actor == 'NVnavkumar' ||
github.actor == 'yinqingh' ||
github.actor == 'thirtiseven' ||
github.actor == 'parthosa' ||
github.actor == 'liurenjie1024' ||
github.actor == 'binmahone' ||
github.actor == 'pmattione-nvidia' ||
github.actor == 'Feng-Jiang28' ||
github.actor == 'pxLi' ||
github.actor == 'ustcfy' ||
github.actor == 'zpuller'
)
steps:
- name: Check if comment is issued by authorized person
run: blossom-ci
env:
OPERATION: 'AUTH'
REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
REPO_KEY_DATA: ${{ secrets.BLOSSOM_KEY }}
Vulnerability-scan:
name: Vulnerability scan
needs: [Authorization]
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
repository: ${{ fromJson(needs.Authorization.outputs.args).repo }}
ref: ${{ fromJson(needs.Authorization.outputs.args).ref }}
lfs: 'true'
# repo specific steps
- name: Setup java
uses: actions/setup-java@v4
with:
distribution: adopt
java-version: 8
# add blackduck properties https://synopsys.atlassian.net/wiki/spaces/INTDOCS/pages/631308372/Methods+for+Configuring+Analysis#Using-a-configuration-file
- name: Setup blackduck properties
run: |
PROJECTS=$(mvn -am dependency:tree | grep maven-dependency-plugin | awk '{ out="com.nvidia:"$(NF-1);print out }' | grep rapids | xargs | sed -e 's/ /,/g')
echo detect.maven.build.command="-pl=$PROJECTS -am" >> application.properties
echo detect.maven.included.scopes=compile >> application.properties
- name: Run blossom action
uses: NVIDIA/blossom-action@main
env:
REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
REPO_KEY_DATA: ${{ secrets.BLOSSOM_KEY }}
with:
args1: ${{ fromJson(needs.Authorization.outputs.args).args1 }}
args2: ${{ fromJson(needs.Authorization.outputs.args).args2 }}
args3: ${{ fromJson(needs.Authorization.outputs.args).args3 }}
Job-trigger:
name: Start ci job
needs: [Vulnerability-scan]
runs-on: blossom
steps:
- name: Start ci job
run: blossom-ci
env:
OPERATION: 'START-CI-JOB'
CI_SERVER: ${{ secrets.CI_SERVER }}
REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Upload-Log:
name: Upload log
runs-on: blossom
if : github.event_name == 'workflow_dispatch'
steps:
- name: Jenkins log for pull request ${{ fromJson(github.event.inputs.args).pr }} (click here)
run: blossom-ci
env:
OPERATION: 'POST-PROCESSING'
CI_SERVER: ${{ secrets.CI_SERVER }}
REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}