envoy-prechecks.yml

name: Envoy/prechecks

permissions:
  contents: read

on:
  push:
    branches:
    - main
    - release/v*
  pull_request_target:
    paths:
    - '**/requirements*.txt'
    - '**/go.mod'
    - '**/*.bzl'
    - 'WORKSPACE'
    - '.github/workflows/envoy-prechecks.yml'
    - '.github/workflows/_*.yml'

concurrency:
  group: ${{ github.event.inputs.head_ref || github.run_id }}-${{ github.workflow }}
  cancel-in-progress: true

jobs:
  env:
    uses: ./.github/workflows/_env.yml
    with:
      prime_build_image: true
      check_mobile_run: false
    permissions:
      contents: read
      packages: read

  prechecks:
    needs:
    - env
    strategy:
      fail-fast: false
      matrix:
        include:
        - target: deps
          rbe: false
          managed: true
    uses: ./.github/workflows/_ci.yml
    name: CI ${{ matrix.target }}
    permissions:
      contents: read
      packages: read
    with:
      target: ${{ matrix.target }}
      rbe: ${{ matrix.rbe }}
      bazel_extra: '--config=rbe-envoy-engflow'
      managed: ${{ matrix.managed }}
      cache_build_image: ${{ needs.env.outputs.build_image_ubuntu }}
      repo_ref: ${{ github.event.pull_request.head.sha  }}