Merge pull request #225 from vyos/T6533-add-reusable-workflows

T6533: add reusable workflows

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,60 @@
+<!-- All PR should follow this template to allow a clean and transparent review -->
+<!-- Text placed between these delimiters is considered a comment and is not rendered -->
+
+## Change Summary
+<!--- Provide a general summary of your changes in the Title above -->
+
+## Types of changes
+<!---
+What types of changes does your code introduce? Put an 'x' in all the boxes that apply.
+NOTE: Markdown requires no leading or trailing whitespace inside the [ ] for checking
+the box, please use [x]
+-->
+- [ ] Bug fix (non-breaking change which fixes an issue)
+- [ ] New feature (non-breaking change which adds functionality)
+- [ ] Code style update (formatting, renaming)
+- [ ] Refactoring (no functional changes)
+- [ ] Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
+- [ ] Other (please describe):
+
+## Related Task(s)
+<!-- optional: Link to related other tasks on Phabricator. -->
+<!-- * https://vyos.dev/Txxxx -->
+
+## Related PR(s)
+<!-- Link here any PRs in other repositories that are required by this PR -->
+
+## Component(s) name
+<!-- A rather incomplete list of components: ethernet, wireguard, bgp, mpls, ldp, l2tp, dhcp ... -->
+
+## Proposed changes
+<!--- Describe your changes in detail -->
+
+## How to test
+<!---
+Please describe in detail how you tested your changes. Include details of your testing
+environment, and the tests you ran. When pasting configs, logs, shell output, backtraces,
+and other large chunks of text, surround this text with triple backtics
+```
+like this
+```
+-->
+
+## Smoketest result
+<!-- Provide the output of the smoketest
+```
+$ /usr/libexec/vyos/tests/smoke/cli/test_xxx_feature.py
+test_01_simple_options (__main__.TestFeature.test_01_simple_options) ... ok
+```
+-->
+
+## Checklist:
+<!--- Go over all the following points, and put an `x` in all the boxes that apply. -->
+<!--- If you're unsure about any of these, don't hesitate to ask. We're here to help! -->
+<!--- The entire development process is outlined here: https://docs.vyos.io/en/latest/contributing/development.html -->
+- [ ] I have read the [**CONTRIBUTING**](https://github.com/vyos/vyos-1x/blob/current/CONTRIBUTING.md) document
+- [ ] I have linked this PR to one or more Phabricator Task(s)
+- [ ] I have run the components [**SMOKETESTS**](https://github.com/vyos/vyos-1x/tree/current/smoketest/scripts/cli) if applicable
+- [ ] My commit headlines contain a valid Task id
+- [ ] My change requires a change to the documentation
+- [ ] I have updated the documentation accordingly

.github/workflows/add-pr-labels.yml

@@ -0,0 +1,16 @@
+name: Add pull request labels
+
+on:
+  pull_request_target:
+    branches:
+      - equuleus
+      - sagitta
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  add-pr-label:
+    uses: vyos/.github/.github/workflows/add-pr-labels.yml@sagitta
+    secrets: inherit

.github/workflows/auto-author-assign.yml

@@ -0,0 +1,14 @@
+name: "PR Triage"
+on:
+  pull_request_target:
+    types: [opened, reopened, ready_for_review, locked]
+
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  assign-author:
+    uses: vyos/.github/.github/workflows/assign-author.yml@sagitta
+    secrets: inherit

.github/workflows/chceck-pr-message.yml

@@ -0,0 +1,18 @@
+---
+  name: Check pull request message format
+
+  on:
+    pull_request_target:
+      branches:
+        - equuleus
+        - sagitta
+      types: [opened, synchronize, edited]
+
+  permissions:
+    pull-requests: write
+    contents: read
+
+  jobs:
+    check-pr-title:
+      uses: vyos/.github/.github/workflows/check-pr-message.yml@sagitta
+      secrets: inherit

.github/workflows/check-pr-conflicts.yml

@@ -0,0 +1,14 @@
+name: "PR Conflicts checker"
+on:
+  pull_request_target:
+    types: [synchronize]
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  check-pr-conflict-call:
+    uses: vyos/.github/.github/workflows/check-pr-merge-conflict.yml@sagitta
+    secrets: inherit
+

.github/workflows/check-stale.yml

@@ -0,0 +1,13 @@
+name: "Issue and PR stale management"
+on:
+  schedule:
+  - cron: "0 0 * * *"
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  stale:
+    uses: vyos/.github/.github/workflows/check-stale.yml@sagitta
+    secrets: inherit

.github/workflows/check-unused-imports.yml

@@ -0,0 +1,16 @@
+name: Check for unused imports using Pylint
+on:
+  pull_request_target:
+    branches:
+      - equuleus
+      - sagitta
+  workflow_dispatch:
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  check-unused-imports:
+    uses: vyos/.github/.github/workflows/check-unused-imports.yml@sagitta
+    secrets: inherit

.github/workflows/codeql.yml

@@ -0,0 +1,22 @@
+name: "Perform CodeQL Analysis"
+
+on:
+  push:
+    branches: [ "sagitta", "equuleus"]
+  pull_request_target:
+    # The branches below must be a subset of the branches above
+    branches: [ "sagitta" ]
+  schedule:
+    - cron: '22 10 * * 0'
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  codeql-analysis-call:
+    uses: vyos/.github/.github/workflows/codeql-analysis.yml@sagitta
+    secrets: inherit
+    with:
+      languages: "['python']"

.github/workflows/lint-j2.yml

@@ -0,0 +1,17 @@
+---
+  name: J2 Lint
+
+  on:
+    pull_request_target:
+      branches:
+        - equuleus
+        - sagitta
+
+  permissions:
+    pull-requests: write
+    contents: read
+
+  jobs:
+    j2lint:
+      uses: vyos/.github/.github/workflows/lint-j2.yml@sagitta
+      secrets: inherit

.github/workflows/sonarcloud.yml

@@ -0,0 +1,21 @@
+name: Sonar Checks
+on:
+  push:
+    branches:
+        - equuleus
+        - sagitta
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+jobs:
+  sonar-cloud:
+    name: SonarCloud
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
+      - name: SonarCloud Scan
+        uses: SonarSource/sonarcloud-github-action@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

CODEOWNERS

@@ -0,0 +1 @@
+* @vyos/reviewers