Require secrets to be set to run Pages deployment

sealer3 · Apr 25, 2024 · bb3d882 · bb3d882
1 parent 9494667
commit bb3d882
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 0 deletions.
diff --git a/.github/workflows/integration-deployment.yaml b/.github/workflows/integration-deployment.yaml
@@ -1,28 +1,50 @@
 on: [push]
 jobs:
+  check-secrets:
+    runs-on: ubuntu-latest
+    outputs:
+      has-secrets: ${{ steps.has-secrets.outputs.defined }}
+    steps:
+      - name: Check if deployment secrets are available
+        id: has-secrets
+        shell: bash
+        run: |
+          if [ "${{ secrets.CLOUDFLARE_API_TOKEN }}" != '' ] && [ "${{ secrets.CLOUDFLARE_ACCOUNT_ID }}" != '' ] && [ "${{ secrets.CLOUDFLARE_INTEG_MAINNET_PROJECT }}" != '' ]; then
+            echo "defined=true" >> $GITHUB_OUTPUT;
+          else
+            echo "defined=false" >> $GITHUB_OUTPUT;
+          fi
   deploy-mainnet:
     uses: ./.github/workflows/pages-deployment.yaml
+    if: ${{ needs.check-secrets.outputs.has-secrets == 'true' }}
+    needs: [check-secrets]
     secrets:
       apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
       accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
       projectName: ${{ secrets.CLOUDFLARE_INTEG_MAINNET_PROJECT }}
       viteConfigJson: ${{ secrets.CLOUDFLARE_INTEG_MAINNET_SETTINGS }}
   deploy-gnosis:
     uses: ./.github/workflows/pages-deployment.yaml
+    if: ${{ needs.check-secrets.outputs.has-secrets == 'true' }}
+    needs: [check-secrets]
     secrets:
       apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
       accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
       projectName: ${{ secrets.CLOUDFLARE_INTEG_GNOSIS_PROJECT }}
       viteConfigJson: ${{ secrets.CLOUDFLARE_INTEG_GNOSIS_SETTINGS }}
   deploy-op-mainnet:
     uses: ./.github/workflows/pages-deployment.yaml
+    if: ${{ needs.check-secrets.outputs.has-secrets == 'true' }}
+    needs: [check-secrets]
     secrets:
       apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
       accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
       projectName: ${{ secrets.CLOUDFLARE_INTEG_OP_MAINNET_PROJECT }}
       viteConfigJson: ${{ secrets.CLOUDFLARE_INTEG_OP_MAINNET_SETTINGS }}
   deploy-e3-sepolia:
     uses: ./.github/workflows/pages-deployment.yaml
+    if: ${{ needs.check-secrets.outputs.has-secrets == 'true' }}
+    needs: [check-secrets]
     secrets:
       apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
       accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}

diff --git a/.github/workflows/pages-deployment.yaml b/.github/workflows/pages-deployment.yaml
@@ -11,8 +11,24 @@ on:
         required: true
 
 jobs:
+  check-secrets:
+    runs-on: ubuntu-latest
+    outputs:
+      has-secrets: ${{ steps.has-secrets.outputs.defined }}
+    steps:
+      - name: Check if deployment secrets are available
+        id: has-secrets
+        shell: bash
+        run: |
+          if [ "${{ secrets.apiToken }}" != '' ] && [ "${{ secrets.accountId }}" != '' ] && [ "${{ secrets.projectName }}" != '' ]; then
+            echo "defined=true" >> $GITHUB_OUTPUT;
+          else
+            echo "defined=false" >> $GITHUB_OUTPUT;
+          fi
   deploy-cloudflare:
     runs-on: ubuntu-latest
+    if: ${{ needs.check-secrets.outputs.has-secrets == 'true' }}
+    needs: [check-secrets]
     permissions:
       contents: read
       deployments: write