add trestle-bot workflows for autosync catalogs and profiles

RedHatProductSecurity · May 23, 2024 · 520b7b1 · 520b7b1
1 parent 7092184
commit 520b7b1
Show file tree

Hide file tree

Showing 2 changed files with 64 additions and 0 deletions.
diff --git a/.github/workflows/trestlebot-autosync-catalog.yml b/.github/workflows/trestlebot-autosync-catalog.yml
@@ -0,0 +1,32 @@
+---
+name: Trestle-bot autosync catalog updates
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - 'catalogs/**'
+      - 'markdown/catalogs/**'
+
+jobs:
+  autosync:
+    name: Autosync catalog content
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.head_ref }}
+      - name: Run autosync
+        id: autosync
+        uses: RedHatProductSecurity/trestle-bot/actions/autosync@main
+        with:
+          markdown_path: "markdown/catalogs"
+          oscal_model: "catalog"
+          file_pattern: "*.json,markdown/*"
+          branch: ${{ github.head_ref }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+
diff --git a/.github/workflows/trestlebot-autosync-profile.yml b/.github/workflows/trestlebot-autosync-profile.yml
@@ -0,0 +1,32 @@
+---
+name: Trestle-bot autosync profile updates
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - 'profiles/**'
+      - 'markdown/profiles/**'
+
+jobs:
+  autosync:
+    name: Autosync profile content
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.head_ref }}
+      - name: Run autosync
+        id: autosync
+        uses: RedHatProductSecurity/trestle-bot/actions/autosync@main
+        with:
+          markdown_path: "markdown/profiles"
+          oscal_model: "profile"
+          file_pattern: "*.json,markdown/*"
+          branch: ${{ github.head_ref }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+