Add soft delete support to storage-account module
#310
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: build | |
| on: | |
| push: | |
| branches: | |
| - main | |
| tags: | |
| - '*' | |
| pull_request: | |
| branches: | |
| - main | |
| workflow_dispatch: | |
| inputs: | |
| forcePublish: | |
| description: When true the Publish stage will always be run, otherwise it only runs for tagged versions. | |
| required: false | |
| default: false | |
| type: boolean | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| checks: write # enable test result annotations | |
| contents: write # enable creating releases | |
| issues: read | |
| packages: write # enable publishing packages | |
| pull-requests: write # enable test result annotations | |
| jobs: | |
| build: | |
| name: Run Build | |
| runs-on: ubuntu-latest | |
| outputs: | |
| semver: ${{ steps.run_build.outputs.semver }} | |
| major: ${{ steps.run_build.outputs.major }} | |
| majorMinor: ${{ steps.run_build.outputs.majorMinor }} | |
| preReleaseTag: ${{ steps.run_build.outputs.preReleaseTag }} | |
| steps: | |
| - uses: endjin/Endjin.RecommendedPractices.GitHubActions/actions/prepare-env-vars-and-secrets@main | |
| id: prepareEnvVarsAndSecrets | |
| with: | |
| environmentVariablesYaml: | | |
| BUILDVAR_BicepRegistryFqdn: "endjin.azurecr.io" | |
| BUILDVAR_ContainerImageVersionOverride: "" | |
| BUILDVAR_Configuration: "Release" | |
| BUILDVAR_BaseBranch: ${{ github.ref == 'refs/heads/main' && 'HEAD~1' || 'origin/main' }} | |
| PublicRelease: ${{ github.ref == 'refs/heads/main' }} | |
| secretsYaml: | | |
| { | |
| } | |
| - uses: endjin/Endjin.RecommendedPractices.GitHubActions/actions/run-build-process@main | |
| id: run_build | |
| with: | |
| netSdkVersion: '8.x' | |
| # workflow_dispatch inputs are always strings, the type property is just for the UI | |
| forcePublish: ${{ github.event.inputs.forcePublish == 'true' }} | |
| sbomOutputStorageAccountName: ${{ vars.SBOM_OUTPUT_STORAGE_ACCOUNT_NAME }} | |
| sbomOutputStorageContainerName: ${{ vars.SBOM_OUTPUT_STORAGE_CONTAINER_NAME }} | |
| buildEnv: ${{ steps.prepareEnvVarsAndSecrets.outputs.environmentVariablesYamlBase64 }} | |
| buildSecrets: ${{ steps.prepareEnvVarsAndSecrets.outputs.secretsYamlBase64 }} | |
| buildAzureCredentials: ${{ secrets.ENDJIN_PROD_ACR_PUBLISH_CREDENTIALS }} | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| # Override default logic for when to do a full publishing build. | |
| # Since Bicep modules are versioned independently, it makes no sense to only publish when the repo itself is tagged. | |
| buildTasks: ${{ (github.ref == 'refs/heads/main' || github.event.inputs.forcePublish == 'true') && 'FullBuildAndPublish' || 'FullBuild' }} |