Phase 4c: Intercept non-SSO logins for enforced domains #599
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Platform | |
| permissions: | |
| contents: read | |
| on: | |
| pull_request: | |
| branches: [master] | |
| paths-ignore: | |
| - "site/**" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| format-check: | |
| name: Format Check | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - name: Install build tools | |
| uses: jdx/mise-action@9dc7d5dd454262207dea3ab5a06a3df6afc8ff26 # v3.4.1 | |
| - run: rustup upgrade | |
| - run: mise run ci:format-check | |
| sqlx-check: | |
| name: SQLx Check | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - name: Install build tools | |
| uses: jdx/mise-action@9dc7d5dd454262207dea3ab5a06a3df6afc8ff26 # v3.4.1 | |
| - run: rustup upgrade | |
| - run: mise run local:supabase --no-block | |
| - name: Cache Rust workspace | |
| uses: Swatinem/rust-cache@f13886b937689c021905a6b90929199931d60db1 # v2.8.1 | |
| with: | |
| workspaces: ". -> ../../../cargo-target" | |
| - name: Cache RocksDB | |
| uses: actions/cache@v4 | |
| with: | |
| key: rocksdb-${{ runner.os }}-${{ runner.arch }}-${{ env.ROCKSDB_VERSION }} | |
| path: | | |
| ~/rocksdb-${{ env.ROCKSDB_VERSION }}/include/ | |
| ~/rocksdb-${{ env.ROCKSDB_VERSION }}/lib/ | |
| - uses: mozilla-actions/sccache-action@v0.0.9 | |
| - run: echo 'SCCACHE_GHA_ENABLED=true' >> $GITHUB_ENV | |
| - name: Cache sqlx-cli | |
| id: cache-sqlx | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.cargo/bin/cargo-sqlx | |
| key: sqlx-cli-${{ runner.os }}-${{ runner.arch }}-0.8.6 | |
| - name: Install sqlx-cli | |
| if: steps.cache-sqlx.outputs.cache-hit != 'true' | |
| run: cargo install sqlx-cli@0.8.6 --no-default-features --features postgres | |
| - run: mise run build:rocksdb | |
| - run: mise run local:supabase | |
| - run: mise run ci:sqlx-check | |
| platform-test: | |
| name: Platform Test | |
| runs-on: ubuntu-2404-large | |
| steps: | |
| - uses: actions/checkout@v5 | |
| with: | |
| submodules: true # Official JSON test data. | |
| lfs: true # Test fixtures. | |
| - name: Install build tools | |
| uses: jdx/mise-action@9dc7d5dd454262207dea3ab5a06a3df6afc8ff26 # v3.4.1 | |
| - run: rustup upgrade | |
| - name: Cache Rust workspace | |
| uses: Swatinem/rust-cache@f13886b937689c021905a6b90929199931d60db1 # v2.8.1 | |
| with: | |
| workspaces: ". -> ../../../cargo-target" | |
| - name: Cache RocksDB | |
| uses: actions/cache@v4 | |
| with: | |
| key: rocksdb-${{ runner.os }}-${{ runner.arch }}-${{ env.ROCKSDB_VERSION }} | |
| path: | | |
| ~/rocksdb-${{ env.ROCKSDB_VERSION }}/include/ | |
| ~/rocksdb-${{ env.ROCKSDB_VERSION }}/lib/ | |
| - name: Cache/Restore Go workspace. | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - uses: mozilla-actions/sccache-action@v0.0.9 | |
| - run: echo 'SCCACHE_GHA_ENABLED=true' >> $GITHUB_ENV | |
| # These steps are kept in lockstep with task `ci:platform-test` | |
| # (formating and SQLx checks are run in separate jobs above to provide faster feedback). | |
| - run: mise run local:supabase --no-block | |
| - run: mise run build:rocksdb | |
| - run: mise run ci:musl-dev | |
| - run: mise run ci:wasm-test --browser | |
| - run: mise run local:supabase | |
| - run: mise run ci:sql-tap | |
| - run: mise run ci:gnu-dev | |
| - run: mise run build:gazette | |
| - run: mise run build:flowctl-go | |
| - run: mise run ci:nextest-build | |
| - run: mise run ci:nextest-run | |
| - run: mise run ci:doctest | |
| - run: mise run ci:gotest | |
| - run: mise run ci:catalog-test | |
| - run: mise run build:flow-schema |