build: fix CVE-2022-40897 (#7080) #2
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test documentation snippets for Haystack 2.x | |
| on: | |
| workflow_dispatch: # Activate this workflow manually | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| paths: | |
| - examples/** | |
| types: | |
| - opened | |
| - reopened | |
| - synchronize | |
| - ready_for_review | |
| env: | |
| OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }} | |
| PYTHON_VERSION: "3.8" | |
| jobs: | |
| black: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: ${{ env.PYTHON_VERSION }} | |
| - name: Install Black | |
| run: | | |
| pip install --upgrade pip | |
| pip install .[dev] | |
| - name: Check status | |
| run: | | |
| if ! black . --check; then | |
| git status | |
| echo "###################################################################################################" | |
| echo "# " | |
| echo "# CHECK FAILED! Black found issues with your code formatting." | |
| echo "# " | |
| echo "# Either:" | |
| echo "# 1. Run Black locally before committing:" | |
| echo "# " | |
| echo "# pip install .[formatting]" | |
| echo "# black ." | |
| echo "# " | |
| echo "# 2. Install the pre-commit hook:" | |
| echo "# " | |
| echo "# pre-commit install" | |
| echo "# " | |
| echo "# 3. See https://github.com/deepset-ai/haystack/blob/main/CONTRIBUTING.md for help." | |
| echo "# " | |
| echo "# If you have further problems, please open an issue: https://github.com/deepset-ai/haystack/issues" | |
| echo "# " | |
| echo "##################################################################################################" | |
| exit 1 | |
| fi | |
| - name: Calculate alert data | |
| id: calculator | |
| shell: bash | |
| if: (success() || failure()) && github.ref_name == 'main' | |
| run: | | |
| if [ "${{ job.status }}" = "success" ]; then | |
| echo "alert_type=success" >> "$GITHUB_OUTPUT"; | |
| else | |
| echo "alert_type=error" >> "$GITHUB_OUTPUT"; | |
| fi | |
| - name: Send event to Datadog | |
| if: (success() || failure()) && github.ref_name == 'main' | |
| uses: masci/datadog@v1 | |
| with: | |
| api-key: ${{ secrets.CORE_DATADOG_API_KEY }} | |
| api-url: https://api.datadoghq.eu | |
| events: | | |
| - title: "${{ github.workflow }} workflow" | |
| text: "Job ${{ github.job }} in branch ${{ github.ref_name }}" | |
| alert_type: "${{ steps.calculator.outputs.alert_type }}" | |
| source_type_name: "Github" | |
| host: ${{ github.repository_owner }} | |
| tags: | |
| - "project:${{ github.repository }}" | |
| - "job:${{ github.job }}" | |
| - "run_id:${{ github.run_id }}" | |
| - "workflow:${{ github.workflow }}" | |
| - "branch:${{ github.ref_name }}" | |
| - "url:https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}" | |
| tests: | |
| name: Snippets | |
| needs: black | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: ${{ env.PYTHON_VERSION }} | |
| - name: Install snippets dependencies | |
| run: | | |
| pip install --upgrade pip | |
| pip install "." torch | |
| pip install pydantic | |
| - name: Get changed files | |
| id: files | |
| uses: tj-actions/changed-files@v42 | |
| with: | |
| files: | | |
| examples/**.py | |
| - name: Run each snippet | |
| run: | | |
| CHANGED_FILES=${{ steps.files.outputs.all_changed_files }} | |
| for file in $CHANGED_FILES; do | |
| python "$file" | |
| done | |
| - name: Calculate alert data | |
| id: calculator | |
| if: (success() || failure()) && github.ref_name == 'main' | |
| shell: bash | |
| run: | | |
| if [ "${{ job.status }}" = "success" ]; then | |
| echo "alert_type=success" >> "$GITHUB_OUTPUT"; | |
| else | |
| echo "alert_type=error" >> "$GITHUB_OUTPUT"; | |
| fi | |
| - name: Send event to Datadog | |
| if: (success() || failure()) && github.ref_name == 'main' | |
| uses: masci/datadog@v1 | |
| with: | |
| api-key: ${{ secrets.CORE_DATADOG_API_KEY }} | |
| api-url: https://api.datadoghq.eu | |
| events: | | |
| - title: "${{ github.workflow }} workflow" | |
| text: "Job ${{ github.job }} in branch ${{ github.ref_name }}" | |
| alert_type: "${{ steps.calculator.outputs.alert_type }}" | |
| source_type_name: "Github" | |
| host: ${{ github.repository_owner }} | |
| tags: | |
| - "project:${{ github.repository }}" | |
| - "job:${{ github.job }}" | |
| - "run_id:${{ github.run_id }}" | |
| - "workflow:${{ github.workflow }}" | |
| - "branch:${{ github.ref_name }}" | |
| - "url:https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}" |