nix-super/.github/workflows/hydra_status.yml

name: Hydra status

permissions: read-all

on:
  schedule:
    - cron: "12,42 * * * *"
  workflow_dispatch:

jobs:
  check_hydra_status:
    name: Check Hydra status
    if: github.repository_owner == 'NixOS'
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
      with:
        fetch-depth: 0
    - run: bash scripts/check-hydra-status.sh
Add a github cron to check the hydra status Add a regular github action that will check the status of the latest hydra evaluation. Things aren’t ideal right now because this job will only notify “the user who last modified the cron syntax in the workflow file” (so myself atm). But at least that’ll give a notification for failing hydra jobs 2021-11-30 18:32:40 +02:00			`name: Hydra status`
Restrict the permissions of the CI 2022-07-05 13:06:58 +03:00
			`permissions: read-all`

Add a github cron to check the hydra status Add a regular github action that will check the status of the latest hydra evaluation. Things aren’t ideal right now because this job will only notify “the user who last modified the cron syntax in the workflow file” (so myself atm). But at least that’ll give a notification for failing hydra jobs 2021-11-30 18:32:40 +02:00			`on:`
			`schedule:`
			`- cron: "12,42 * * * *"`
			`workflow_dispatch:`
chore: Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> 2022-07-01 03:29:30 +03:00
Add a github cron to check the hydra status Add a regular github action that will check the status of the latest hydra evaluation. Things aren’t ideal right now because this job will only notify “the user who last modified the cron syntax in the workflow file” (so myself atm). But at least that’ll give a notification for failing hydra jobs 2021-11-30 18:32:40 +02:00			`jobs:`
			`check_hydra_status:`
			`name: Check Hydra status`
			`if: github.repository_owner == 'NixOS'`
			`runs-on: ubuntu-latest`
			`steps:`
Bump actions/checkout from 2 to 3 Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> 2022-04-13 15:10:29 +03:00			`- uses: actions/checkout@v3`
Add a github cron to check the hydra status Add a regular github action that will check the status of the latest hydra evaluation. Things aren’t ideal right now because this job will only notify “the user who last modified the cron syntax in the workflow file” (so myself atm). But at least that’ll give a notification for failing hydra jobs 2021-11-30 18:32:40 +02:00			`with:`
			`fetch-depth: 0`
			`- run: bash scripts/check-hydra-status.sh`