diff --git a/.github/linters/zizmor.yaml b/.github/linters/zizmor.yaml index 00ea2bb..4c0101b 100644 --- a/.github/linters/zizmor.yaml +++ b/.github/linters/zizmor.yaml @@ -3,3 +3,6 @@ rules: config: policies: "*": ref-pin + secrets-outside-env: + ignore: + - pylint.yaml diff --git a/.github/workflows/add-labels-standardized.yaml b/.github/workflows/add-labels-standardized.yaml index 9ab803e..6a4b753 100644 --- a/.github/workflows/add-labels-standardized.yaml +++ b/.github/workflows/add-labels-standardized.yaml @@ -15,14 +15,6 @@ jobs: secrets: ORG_MEMBERSHIP_TOKEN: ${{ secrets.ORG_MEMBERSHIP_TOKEN }} MEMBERS: ${{ secrets.SENZING_MEMBERS }} - uses: senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml@v4 - - slack-notification: - needs: [add-issue-labels] - if: ${{ always() && contains(fromJSON('["failure", "cancelled"]'), needs.add-issue-labels.result) }} - secrets: SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }} SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }} - uses: senzing-factory/build-resources/.github/workflows/build-failure-slack-notification.yaml@v4 - with: - job-status: ${{ needs.add-issue-labels.result }} + uses: senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml@v4 diff --git a/.github/workflows/add-to-project-senzing-dependabot.yaml b/.github/workflows/add-to-project-senzing-dependabot.yaml index 43e71dc..0477344 100644 --- a/.github/workflows/add-to-project-senzing-dependabot.yaml +++ b/.github/workflows/add-to-project-senzing-dependabot.yaml @@ -12,16 +12,8 @@ jobs: repository-projects: write secrets: PROJECT_RW_TOKEN: ${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }} - uses: senzing-factory/build-resources/.github/workflows/add-to-project-dependabot.yaml@v4 - with: - project: ${{ vars.SENZING_GITHUB_ORGANIZATION_PROJECT }} - - slack-notification: - needs: [add-to-project-dependabot] - if: ${{ always() && contains(fromJSON('["failure", "cancelled"]'), needs.add-to-project-dependabot.result) }} - secrets: SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }} SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }} - uses: senzing-factory/build-resources/.github/workflows/build-failure-slack-notification.yaml@v4 + uses: senzing-factory/build-resources/.github/workflows/add-to-project-dependabot.yaml@v4 with: - job-status: ${{ needs.add-to-project-dependabot.result }} + project: ${{ vars.SENZING_GITHUB_ORGANIZATION_PROJECT }} diff --git a/.github/workflows/add-to-project-senzing.yaml b/.github/workflows/add-to-project-senzing.yaml index 169bff3..e818753 100644 --- a/.github/workflows/add-to-project-senzing.yaml +++ b/.github/workflows/add-to-project-senzing.yaml @@ -14,17 +14,9 @@ jobs: repository-projects: write secrets: PROJECT_RW_TOKEN: ${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }} + SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }} + SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }} uses: senzing-factory/build-resources/.github/workflows/add-to-project.yaml@v4 with: project-number: ${{ vars.SENZING_GITHUB_ORGANIZATION_PROJECT }} org: ${{ vars.SENZING_GITHUB_ACCOUNT_NAME }} - - slack-notification: - needs: [add-to-project] - if: ${{ always() && contains(fromJSON('["failure", "cancelled"]'), needs.add-to-project.result) }} - secrets: - SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }} - SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }} - uses: senzing-factory/build-resources/.github/workflows/build-failure-slack-notification.yaml@v4 - with: - job-status: ${{ needs.add-to-project.result }} diff --git a/.github/workflows/pylint.yaml b/.github/workflows/pylint.yaml index 1a9ab89..e8aa11e 100644 --- a/.github/workflows/pylint.yaml +++ b/.github/workflows/pylint.yaml @@ -45,12 +45,10 @@ jobs: # shellcheck disable=SC2046 pylint $(git ls-files '*.py' ':!:docs/source/*') - slack-notification: - needs: [pylint] - if: ${{ always() && contains(fromJSON('["failure", "cancelled"]'), needs.pylint.result ) && github.ref_name == github.event.repository.default_branch }} - secrets: - SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }} - SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }} - uses: senzing-factory/build-resources/.github/workflows/build-failure-slack-notification.yaml@v4 - with: - job-status: ${{ needs.pylint.result }} + - name: Notify Slack on failure + if: (failure() || cancelled()) && github.ref_name == github.event.repository.default_branch + uses: senzing-factory/build-resources/slack-failure-notification@v4 + with: + job-status: ${{ job.status }} + slack-channel: ${{ secrets.SLACK_CHANNEL }} + slack-bot-token: ${{ secrets.SLACK_BOT_TOKEN }}