Move reused worflows to the "reusable" directory.

.github/CODEOWNERS

@@ -200,7 +200,7 @@ datadog_checks_base/tests/**/test_db_statements.py  @DataDog/database-monitoring
 # APM Integrations
 /langchain/         @DataDog/ml-observability @DataDog/agent-integrations @DataDog/documentation
 /openai/            @DataDog/ml-observability @DataDog/agent-integrations @DataDog/documentation
-
+/anthropic/         @DataDog/ml-observability @DataDog/agent-integrations @DataDog/documentation
 
 # Windows agent
 datadog_checks_base/datadog_checks/base/checks/win/                  @DataDog/windows-agent @DataDog/agent-integrations

.github/workflows/config/labeler.yml

@@ -317,6 +317,8 @@ integration/kyverno:
 - kyverno/**/*
 integration/langchain:
 - langchain/**/*
+integration/anthropic:
+- anthropic/**/*
 integration/lastpass:
 - lastpass/**/*
 integration/lighttpd:

.github/workflows/flaky-tests.yml

@@ -36,7 +36,7 @@ jobs:
     concurrency:
       group: test-results
 
-    uses: ./.github/workflows/test-results-master.yml
+    uses: ./.github/workflows/reusable/test-results-master.yml
     secrets: inherit
 
   submit-traces:

.github/workflows/master.yml

@@ -42,7 +42,7 @@ jobs:
       pull-requests: write
       contents: write
 
-    uses: ./.github/workflows/test-results-master.yml
+    uses: ./.github/workflows/reusable/test-results-master.yml
     secrets: inherit
 
   submit-traces:

.github/workflows/pr-check.yml

@@ -12,6 +12,10 @@ jobs:
   run:
     uses: ./.github/workflows/pr-quick-check.yml
     if: ${{ github.base_ref == 'master' }}
+    permissions: # These permissions need to match the ones in the included workflow, see pr-quick-check.yml for details
+      pull-requests: write
+      contents: read
     with:
       repo: core
     secrets: inherit
+

.github/workflows/pr-quick-check.yml

@@ -21,8 +21,8 @@ jobs:
     runs-on: ubuntu-22.04
 
     permissions:
-      pull-requests: write
-      contents: read
+      pull-requests: write # For the "Comment" step, read for the "Fetch script" and "Check changelog" steps
+      contents: read # For the "Fetch diff" and "Check changelog" steps
 
     steps:
     # Uncomment for testing purposes

.github/workflows/pr.yml

@@ -18,7 +18,7 @@ concurrency:
 
 jobs:
   test:
-    uses: ./.github/workflows/pr-test.yml
+    uses: ./.github/workflows/reusable/pr-test.yml
     with:
       repo: core
     secrets: inherit

.github/workflows/publish-test-results-pr.yml

@@ -10,9 +10,11 @@ on:
 
 jobs:
   publish:
-    uses: ./.github/workflows/test-results-pr.yml
+    uses: ./.github/workflows/reusable/test-results-pr.yml
     if: github.event.workflow_run.conclusion != 'skipped'
-    permissions:
+    permissions: # These permissions need to match the ones in the included workflow, see test-results-pr.yml for details
       checks: write
       pull-requests: write
+      contents: read
+      actions: read
     secrets: inherit

.github/workflows/pr-test.yml → .github/workflows/reusable/pr-test.yml

@@ -36,7 +36,7 @@ jobs:
       matrix:
         include: ${{ fromJson(needs.compute-matrix.outputs.matrix) }}
 
-    uses: ./.github/workflows/test-target.yml
+    uses: ./.github/workflows/reusable/test-results-pr.yml
     with:
       job-name: "${{ matrix.name }}"
       target: "${{ matrix.target }}"

.github/workflows/test-results-pr.yml → .github/workflows/reusable/test-results-pr.yml

@@ -12,10 +12,11 @@ jobs:
     name: Publish test results
     runs-on: ubuntu-22.04
 
-    permissions:
-      checks: write
-      pull-requests: write
-      contents: write
+    permissions: 
+      checks: write # For EnricoMi/publish-unit-test-result-action@v2
+      pull-requests: write  # For EnricoMi/publish-unit-test-result-action@v2
+      contents: read  # For EnricoMi/publish-unit-test-result-action@v2
+      actions: read  # For "Download and extract artifacts"
 
     steps:
     - name: Download and extract artifacts