upstream/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-06-09 08:55:13 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 11

[VAULT-36232] pipeline(changed-files): fail build if we change enterprise files on ce/* branches (#31195)

Browse source 
Signed-off-by: Ryan Cragun <me@ryan.ec>
This commit is contained in:
Ryan Cragun 2025-07-03 09:40:46 -06:00 committed by GitHub
parent 0ee8d99d9c
commit d3a118cd4d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
.github/workflows/build.yml vendored
View file

@ -136,6 +136,22 @@ jobs:
id: changed-files
with:
github-token: ${{ steps.metadata.outputs.is-enterprise != 'true' && secrets.ELEVATED_GITHUB_TOKEN || steps.vault-secrets.outputs.ELEVATED_GITHUB_TOKEN }}
# Ensure that we have not changed any enterprise files on pull requests against ce/* branches.
# We do this here because we have the information, there's absolutely no reason to go
# further until we've resolved the issue, and we want to fail a required workflow if this
# issue is present.
- if: |
steps.metadata.outputs.is-enterprise == 'true' &&
steps.metadata.outputs.workflow-trigger == 'pull_request' &&
startsWith(github.event.pull_request.base.ref, 'ce/') &&
contains(fromJSON(steps.changed-files.outputs.changed-files).groups, 'enterprise')
name: Ensure that we have not changed any enterprise files on pull requests against ce/* branches.
run: |
echo "The pull request has changed files that are in enterprise groups!"
echo "If you believe this to be in error you will want to update the changed files checks in tools/pipeline/internal/pkg/changed"
echo "on our enterprise branches and backport them to ce/* before continuing with this pull request."
echo "See the 'changed-files' step above for a list of changed files and their associated metadata groups."
exit 1
# Make sure all required Go modules are cached at this point. We don't want all of the Go
# tests and build jobs to download modules and race to upload them to the cache.
- uses: ./.github/actions/set-up-go