Fix promotion gate: add uat branch trigger, rename to Promotion Gate
Follows canonical pattern from headlamp-sealed-secrets-plugin. The pull_request trigger now fires on [uat, main] so the promotion gate check auto-runs on PR open/sync for dev→uat PRs, not just on review events.
This commit is contained in:
committed by
Gandalf the Greybeard [agent]
parent
4b26b97caf
commit
d9aaf5a146
@@ -1,20 +1,20 @@
|
|||||||
name: Dual Approval (CTO + QA)
|
name: Promotion Gate
|
||||||
|
|
||||||
# Calls the shared dual-approval-check workflow.
|
# Calls the shared promotion gate workflow.
|
||||||
# Passes when both privilegedescalation-cto and privilegedescalation-qa
|
# dev PRs: no gate (engineer self-merges).
|
||||||
# have approved the PR. Add "Dual Approval (CTO + QA)" to required_status_checks
|
# uat PRs: QA approval required.
|
||||||
# in branch protection to enforce this gate.
|
# main PRs: UAT approval required (uat→main promotions).
|
||||||
|
|
||||||
on:
|
on:
|
||||||
pull_request_review:
|
pull_request_review:
|
||||||
types: [submitted, dismissed]
|
types: [submitted, dismissed]
|
||||||
pull_request:
|
pull_request:
|
||||||
branches: [main]
|
branches: [uat, main]
|
||||||
types: [opened, reopened, synchronize]
|
types: [opened, reopened, synchronize]
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
dual-approval:
|
promotion-gate:
|
||||||
uses: privilegedescalation/.github/.github/workflows/dual-approval-check.yaml@main
|
uses: privilegedescalation/.github/.github/workflows/dual-approval-check.yaml@main
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
with:
|
with:
|
||||||
pr_number: ${{ github.event.pull_request.number }}
|
pr_number: ${{ github.event.pull_request.number }}
|
||||||
Reference in New Issue
Block a user