vault/.github/actions/set-up-pipeline/action.yml
Vault Automation b3f173756d
actions: pin to latest actions (#12144) (#12146)
Update to the latest actions. The primary motivation here is to get the
latest action-setup-enos.

  - actions/cache => v5.0.3: security patches
  - actions/checkout => v6.0.2: small fixes to git user-agent and tag
    fetching
  - hashicorp/action-setup-enos => v1.50: security patches

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-02-03 22:39:49 +00:00

48 lines
1.6 KiB
YAML

# Copyright IBM Corp. 2016, 2025
# SPDX-License-Identifier: BUSL-1.1
---
name: Install the pipeline tool
description: Install the pipeline tool
inputs:
github-token:
description: An elevated Github token to access private HashiCorp modules.
runs:
using: composite
steps:
- uses: ./.github/actions/set-up-go
with:
github-token: ${{ inputs.github-token || github.token }}
no-restore: true # Don't download vault's modules for pipeline
no-save: true # Don't attempt to save modules either
- name: pipeline-metadata
id: pipeline-metadata
shell: bash
# Uses GITHUB_ENV instead of GITHUB_OUTPUT because composite actions are broken,
# see: https://github.com/actions/cache/issues/803#issuecomment-1793565071
run: |
gobin=$(go env GOBIN)
if [[ -z "$gobin" ]]; then
gobin="$(go env GOPATH)/bin"
fi
{
echo "PIPELINE_HASH=$(git ls-tree HEAD tools/pipeline --object-only)"
echo "PIPELINE_PATH=$gobin/pipeline"
} | tee -a "$GITHUB_ENV"
- name: Try to restore pipeline from cache
id: pipeline-cache
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
with:
path: ${{ env.PIPELINE_PATH }}
key: pipeline-${{ env.PIPELINE_HASH }}
- if: steps.pipeline-cache.outputs.cache-hit != 'true'
id: pipeline-build
name: Build pipeline
shell: bash
env:
GOPRIVATE: github.com/hashicorp/*
run: |
git config --global url."https://${{ inputs.github-token }}@github.com".insteadOf https://github.com
make tools-pipeline