chore(deps): Update GitHub Actions #488
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Qlty | |
| on: | |
| workflow_run: | |
| workflows: ["CI"] | |
| types: | |
| - completed | |
| pull_request: | |
| branches: [main] | |
| schedule: | |
| # Weekly full-codebase health scan: Monday 07:00 UTC | |
| - cron: '0 7 * * 1' | |
| workflow_dispatch: | |
| permissions: read-all | |
| concurrency: | |
| group: qlty-${{ github.event.workflow_run.head_branch || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| # Coverage upload: runs after CI workflow completes successfully. | |
| qlty: | |
| if: github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success' | |
| uses: ByronWilliamsCPA/.github/.github/workflows/python-qlty-coverage.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # main | |
| permissions: | |
| contents: read | |
| actions: read | |
| with: | |
| coverage-artifact-name: coverage-reports | |
| coverage-file-path: coverage.xml | |
| coverage-format: cobertura | |
| workflow-run-id: ${{ github.event.workflow_run.id }} | |
| secrets: | |
| QLTY_COVERAGE_TOKEN: ${{ secrets.QLTY_COVERAGE_TOKEN }} | |
| # PR gate: diff mode, block merges that introduce medium+ severity issues. | |
| # Check name: "qlty-gate / Qlty Gate" -- required by org docs-tier ruleset. | |
| qlty-gate: | |
| if: github.event_name == 'pull_request' | |
| uses: ByronWilliamsCPA/.github/.github/workflows/python-qlty-gate.yml@1561a3ef04892ffd6c4a0c4c46fdf1de5a34ed02 # .github#188 | |
| permissions: | |
| contents: read | |
| with: | |
| fail-level: medium | |
| upstream: origin/${{ github.base_ref }} | |
| # Weekly health scan: full codebase, informational only. | |
| # Remove no-fail once existing qlty debt is resolved. | |
| qlty-health: | |
| if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' | |
| uses: ByronWilliamsCPA/.github/.github/workflows/python-qlty-gate.yml@1561a3ef04892ffd6c4a0c4c46fdf1de5a34ed02 # .github#188 | |
| permissions: | |
| contents: read | |
| with: | |
| fail-level: high | |
| check-all: true | |
| no-fail: true |