Skip to content

Check action secrets #697

Check action secrets

Check action secrets #697

name: Check action secrets
on:
push:
paths:
- '.github/workflows/*.yml'
branches:
- 'main'
- 'master'
schedule:
- cron: '32 22 * * *' # sync-with-template: adjust
workflow_dispatch: { }
defaults:
run:
shell: bash
jobs:
rate-limits:
name: Check rate limits
runs-on: ubuntu-latest
timeout-minutes: 5
concurrency:
group: check-action-secrets
cancel-in-progress: true
steps:
- name: Get rate limits
uses: remal-github-actions/get-rate-limits@v1
id: getRateLimits
with:
githubToken: ${{secrets.LIST_SECRETS || github.token}}
- name: Make decision
id: decision
run: |
echo "Core rate limit usage: ${{steps.getRateLimits.outputs.coreUsage}}"
if [ "${{steps.getRateLimits.outputs.coreUsage < 75}}" == "true" ]; then
echo "Enough rate limits"
echo 'enough=true' >> $GITHUB_OUTPUT
else
echo "::warning::Not enough rate limits!"
if [ "${{github.event_name != 'schedule'}}" == "true" ]; then
echo "::warning::Executing anyway, as event is '${{github.event_name}}'"
fi
echo 'enough=false' >> $GITHUB_OUTPUT
fi
outputs:
enough: ${{steps.decision.outputs.enough}}
check-action-secrets:
needs:
- rate-limits
if: ${{github.event_name != 'schedule' || fromJSON(needs.rate-limits.outputs.enough) == true}}
name: Check action secrets
runs-on: ubuntu-latest
timeout-minutes: 10
concurrency:
group: check-action-secrets
cancel-in-progress: true
steps:
- name: Check action secrets
uses: remal-github-actions/check-action-secrets@v1
with:
githubToken: ${{secrets.LIST_SECRETS}}