4848 spotless :
4949 name : Spotless
5050 uses : ./.github/workflows/node-zxc-compile-application-code.yaml
51+ needs :
52+ - code
5153 with :
5254 custom-job-label : " Check"
5355 enable-unit-tests : false
@@ -57,73 +59,73 @@ jobs:
5759 gradle-cache-username : ${{ secrets.GRADLE_CACHE_USERNAME }}
5860 gradle-cache-password : ${{ secrets.GRADLE_CACHE_PASSWORD }}
5961
60- mats-tests :
61- name : MATS Tests
62- uses : ./.github/workflows/zxc-mats-tests.yaml
63- needs :
64- - dependency-check
65- - spotless
66- with :
67- ref : ${{ github.ref }}
68- enable-unit-tests : " true"
69- enable-integration-tests : " true"
70- enable-hapi-tests : " true"
71- enable-otter-tests : " true"
72- enable-spotless-check : " true"
73- enable-snyk-scan : " true"
74- enable-gradle-determinism : " true"
75- enable-docker-determinism : " true"
76- java-version : " 21.0.6"
77- java-distribution : " temurin"
78- custom-job-label : " MATS (main):"
79- secrets :
80- access-token : ${{ secrets.GITHUB_TOKEN }}
81- codacy-project-token : ${{ secrets.CODACY_PROJECT_TOKEN }}
82- codecov-token : ${{ secrets.CODECOV_TOKEN }}
83- gradle-cache-username : ${{ secrets.GRADLE_CACHE_USERNAME }}
84- gradle-cache-password : ${{ secrets.GRADLE_CACHE_PASSWORD }}
85- snyk-token : ${{ secrets.SNYK_TOKEN }}
62+ mats-tests :
63+ name : MATS Tests
64+ uses : ./.github/workflows/zxc-mats-tests.yaml
65+ needs :
66+ - dependency-check
67+ - spotless
68+ with :
69+ ref : ${{ github.ref }}
70+ enable-unit-tests : " true"
71+ enable-integration-tests : " true"
72+ enable-hapi-tests : " true"
73+ enable-otter-tests : " true"
74+ enable-spotless-check : " true"
75+ enable-snyk-scan : " true"
76+ enable-gradle-determinism : " true"
77+ enable-docker-determinism : " true"
78+ java-version : " 21.0.6"
79+ java-distribution : " temurin"
80+ custom-job-label : " MATS (main):"
81+ secrets :
82+ access-token : ${{ secrets.GITHUB_TOKEN }}
83+ codacy-project-token : ${{ secrets.CODACY_PROJECT_TOKEN }}
84+ codecov-token : ${{ secrets.CODECOV_TOKEN }}
85+ gradle-cache-username : ${{ secrets.GRADLE_CACHE_USERNAME }}
86+ gradle-cache-password : ${{ secrets.GRADLE_CACHE_PASSWORD }}
87+ snyk-token : ${{ secrets.SNYK_TOKEN }}
8688
87- deploy-ci-trigger :
88- name : Trigger CI Flows
89- runs-on : hiero-citr-linux-medium
90- needs :
91- - mats-tests
92- if : ${{ needs.mats-tests.result == 'success' }}
93- steps :
94- - name : Harden Runner
95- uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
96- with :
97- egress-policy : audit
89+ deploy-ci-trigger :
90+ name : Trigger CI Flows
91+ runs-on : hiero-citr-linux-medium
92+ needs :
93+ - mats-tests
94+ if : ${{ needs.mats-tests.result == 'success' }}
95+ steps :
96+ - name : Harden Runner
97+ uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
98+ with :
99+ egress-policy : audit
98100
99- - name : Trigger ZXF Deploy Production Release
100- uses : step-security/workflow-dispatch@b4c1dc0afa074d0b4f0e653d3b80d4b2798599aa # v1.2.7
101- with :
102- workflow : .github/workflows/node-flow-deploy-release-artifact.yaml
103- repo : hiero-ledger/hiero-consensus-node # ensure we are executing in the hiero-ledger org
104- ref : main # ensure we are always using the workflow definition from the main branch
105- token : ${{ secrets.GH_ACCESS_TOKEN }}
106- inputs : ' {
107- "ref": "${{ github.sha }}",
108- "ref-name": "${{ github.ref_name }}",
109- "dry-run-enabled": false
110- }'
101+ - name : Trigger ZXF Deploy Production Release
102+ uses : step-security/workflow-dispatch@b4c1dc0afa074d0b4f0e653d3b80d4b2798599aa # v1.2.7
103+ with :
104+ workflow : .github/workflows/node-flow-deploy-release-artifact.yaml
105+ repo : hiero-ledger/hiero-consensus-node # ensure we are executing in the hiero-ledger org
106+ ref : main # ensure we are always using the workflow definition from the main branch
107+ token : ${{ secrets.GH_ACCESS_TOKEN }}
108+ inputs : ' {
109+ "ref": "${{ github.sha }}",
110+ "ref-name": "${{ github.ref_name }}",
111+ "dry-run-enabled": false
112+ }'
111113
112- report-failure :
113- name : Report MATS execution failure
114- runs-on : hiero-citr-linux-medium
115- needs :
116- - code
117- - dependency-check
118- - spotless
119- - mats-tests
120- - deploy-ci-trigger
121- if : ${{ (needs.code.result != 'success' ||
122- needs.dependency-check.result != 'success' ||
123- needs.spotless.result != 'success' ||
124- needs.mats-tests.result != 'success' ||
125- needs.deploy-ci-trigger.result != 'success') &&
126- !cancelled() && always() }}
114+ report-failure :
115+ name : Report MATS execution failure
116+ runs-on : hiero-citr-linux-medium
117+ needs :
118+ - code
119+ - dependency-check
120+ - spotless
121+ - mats-tests
122+ - deploy-ci-trigger
123+ if : ${{ (needs.code.result != 'success' ||
124+ needs.dependency-check.result != 'success' ||
125+ needs.spotless.result != 'success' ||
126+ needs.mats-tests.result != 'success' ||
127+ needs.deploy-ci-trigger.result != 'success') &&
128+ !cancelled() && always() }}
127129
128130 steps :
129131 - name : Harden Runner
0 commit comments