tenant.openagents/omega

1# Generated from xtask::workflows::compliance_check
2# Rebuild with `cargo xtask workflows`.
3name: compliance_check
4env:
5  CARGO_TERM_COLOR: always
6on:
7  schedule:
8  - cron: 30 17 * * 2
9  workflow_dispatch: {}
10permissions:
11  contents: read
12jobs:
13  scheduled_compliance_check:
14    if: (github.repository_owner == 'zed-industries' || github.repository_owner == 'zed-extensions')
15    runs-on: namespace-profile-2x4-ubuntu-2404
16    steps:
17    - name: steps::checkout_repo
18      uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd
19      with:
20        clean: false
21        fetch-depth: 0
22    - name: steps::cache_rust_dependencies_namespace
23      uses: namespacelabs/nscloud-cache-action@a90bb5d4b27522ce881c6e98eebd7d7e6d1653f9
24      with:
25        cache: rust
26        path: ~/.rustup
27    - id: determine-version
28      name: compliance_check::scheduled_compliance_check
29      run: |
30        VERSION=$(sed -n 's/^version = "\(.*\)"/\1/p' crates/zed/Cargo.toml | tr -d '[:space:]')
31        if [ -z "$VERSION" ]; then
32            echo "Could not determine version from crates/zed/Cargo.toml"
33            exit 1
34        fi
35        TAG="v${VERSION}-pre"
36        echo "Checking compliance for $TAG"
37        echo "tag=$TAG" >> "$GITHUB_OUTPUT"
38    - id: run-compliance-check
39      name: release::add_compliance_steps::run_compliance_check
40      run: |
41        cargo xtask compliance version "$LATEST_TAG" --branch main --report-path "compliance-report-${GITHUB_REF_NAME}.md"
42      env:
43        GITHUB_APP_ID: ${{ secrets.ZED_ZIPPY_APP_ID }}
44        GITHUB_APP_KEY: ${{ secrets.ZED_ZIPPY_APP_PRIVATE_KEY }}
45        LATEST_TAG: ${{ steps.determine-version.outputs.tag }}
46      continue-on-error: true
47    - name: run_bundling::upload_artifact
48      if: always()
49      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
50      with:
51        name: compliance-report-${{ github.ref_name }}.md
52        path: compliance-report-${{ github.ref_name }}.md
53        if-no-files-found: error
54    - name: send_compliance_slack_notification
55      if: ${{ always() }}
56      run: |
57        if [ "$COMPLIANCE_OUTCOME" == "success" ]; then
58            STATUS="✅ Scheduled compliance check passed for $COMPLIANCE_TAG"
59            MESSAGE=$(printf "%s\n\nReport: %s" "$STATUS" "$ARTIFACT_URL")
60        else
61            STATUS="⚠️ Scheduled compliance check failed for $COMPLIANCE_TAG"
62            MESSAGE=$(printf "%s\n\nReport: %s\nPRs needing review: %s" "$STATUS" "$ARTIFACT_URL" "https://github.com/zed-industries/zed/pulls?q=is%3Apr+is%3Aclosed+label%3A%22PR+state%3Aneeds+review%22")
63        fi
64
65        curl -X POST -H 'Content-type: application/json' \
66            --data "$(jq -n --arg text "$MESSAGE" '{"text": $text}')" \
67            "$SLACK_WEBHOOK"
68      env:
69        SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK_WORKFLOW_FAILURES }}
70        COMPLIANCE_OUTCOME: ${{ steps.run-compliance-check.outcome }}
71        COMPLIANCE_TAG: ${{ steps.determine-version.outputs.tag }}
72        ARTIFACT_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}#artifacts
73defaults:
74  run:
75    shell: bash -euxo pipefail {0}
76