diff --git a/.github/workflows/daily_ci.yml b/.github/workflows/daily_ci.yml index 959983a2..a77b20d2 100644 --- a/.github/workflows/daily_ci.yml +++ b/.github/workflows/daily_ci.yml @@ -1,12 +1,29 @@ # This workflow runs every weekday at 15:00 UTC (8AM PDT) name: Daily CI +permissions: + id-token: write + contents: read + on: schedule: - cron: "00 15 * * 1-5" - + pull_request: + paths: + .github/workflows/daily_ci.yml jobs: DAILY_CI: # Don't run the cron builds on forks if: github.event_name != 'schedule' || github.repository_owner == 'aws' - uses: ./.github/workflows/ci.yml \ No newline at end of file + uses: ./.github/workflows/ci.yml + notify: + needs: + [ + DAILY_CI + ] + if: ${{ failure() && github.event_name == 'schedule'}} + uses: ./.github/workflows/slack-notification.yml + with: + message: "Daily CI failed on `${{ github.repository }}`. View run: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" + secrets: + SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL_CI }} diff --git a/.github/workflows/issue-notification.yml b/.github/workflows/issue-notification.yml new file mode 100644 index 00000000..af85aa07 --- /dev/null +++ b/.github/workflows/issue-notification.yml @@ -0,0 +1,25 @@ +name: Issue Created Notification +permissions: + contents: read +on: + issues: + types: [opened, reopened] + issue_comment: + types: [created] + +jobs: + notify-issue: + if: github.event_name == 'issues' + uses: aws/aws-cryptographic-material-providers-library/.github/workflows/slack-notification.yml@main + with: + message: "New github issue `${{ github.event.issue.title }}`. Link: ${{ github.event.issue.html_url }}" + secrets: + SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL_GHI }} + + notify-comment: + if: github.event_name == 'issue_comment' && !github.event.issue.pull_request + uses: aws/aws-cryptographic-material-providers-library/.github/workflows/slack-notification.yml@main + with: + message: "New comment on issue `${{ github.event.issue.title }}`. Link: ${{ github.event.comment.html_url }}" + secrets: + SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL_GHI }}