diff --git a/.github/workflows/schedule.yml b/.github/workflows/schedule.yml new file mode 100644 index 00000000000..e0341cb5db5 --- /dev/null +++ b/.github/workflows/schedule.yml @@ -0,0 +1,25 @@ +name: Scheduled workflows + +on: + schedule: + - cron: '0 0 * * *' + workflow_dispatch: + +jobs: + + run-ci: + name: Run CI workflow + runs-on: ubuntu-latest + steps: + - name: Run Snyk with main branch + run: gh workflow run -R keycloak/keycloak snyk-analysis.yml -r main + if: github.event_name != 'schedule' || github.repository == 'keycloak/keycloak' + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + - name: Run Snyk with latest release branch + run: | + patch_release=$(gh api repos/keycloak/keycloak/branches | jq -r '.[].name' | sort -r | awk -F'/' '/[0-9.]+$/ {print $NF; exit}') + gh workflow run -R keycloak/keycloak snyk-analysis.yml -r "release/$patch_release" + if: github.event_name != 'schedule' || github.repository == 'keycloak/keycloak' + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/snyk-analysis.yml b/.github/workflows/snyk-analysis.yml index 0cb039d8be5..0f883e7b437 100644 --- a/.github/workflows/snyk-analysis.yml +++ b/.github/workflows/snyk-analysis.yml @@ -1,8 +1,6 @@ name: Snyk -on: - schedule: - - cron: 0 0 * * * +on: workflow_dispatch: defaults: