github-actions[bot]
1221080ec5
The CI/CD health check uses GITHUB_TOKEN which only has access to the .github repo. Listing workflow runs across the 6 plugin repos requires org-wide access, causing all repos to show "WARNING: No workflow runs found". Fix: generate a GitHub App token (using RELEASE_APP_ID/RELEASE_APP_PRIVATE_KEY, same as the release workflow) scoped to the org before running the health check script. Falls back to GITHUB_TOKEN gracefully via continue-on-error if the secrets are not yet configured. Once RELEASE_APP_ID is configured as an org secret (tracked separately), the health check will produce accurate cross-repo CI data. Co-Authored-By: Paperclip <noreply@paperclip.ing>
34 lines
1.1 KiB
YAML
34 lines
1.1 KiB
YAML
name: CI/CD Health Check
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '0 8 * * 1-5' # Every weekday at 8 AM UTC
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
health-check:
|
|
runs-on: runners-privilegedescalation
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v6
|
|
|
|
- name: Generate GitHub App token
|
|
id: app-token
|
|
uses: actions/create-github-app-token@v1
|
|
continue-on-error: true
|
|
with:
|
|
app-id: ${{ secrets.RELEASE_APP_ID }}
|
|
private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
|
|
owner: privilegedescalation
|
|
|
|
- name: Run CI/CD health check
|
|
env:
|
|
GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
if [ "${{ steps.app-token.outcome }}" = "success" ]; then
|
|
echo "Using GitHub App token for cross-repo access"
|
|
else
|
|
echo "::warning::RELEASE_APP_ID not configured — using GITHUB_TOKEN. Cross-repo workflow run data will be unavailable. Configure RELEASE_APP_ID org secret to enable full health check."
|
|
fi
|
|
./.github/scripts/ci-health-check.sh
|