From d0f150d4371a5dedcdaef9db8b90682ead442b41 Mon Sep 17 00:00:00 2001 From: Tom Elliott Date: Mon, 17 Aug 2026 11:18:05 -0500 Subject: [PATCH] Run the test suite on pull requests Six lines pointing at the reusable runner in fog-workflows, which is where a pull_request trigger cannot live: it only fires from the repository the PR is opened against. Until now the plugin tests ran only when a maintainer remembered to, and they are the only automated check on code that decides who becomes an administrator of a FOG server -- the OIDC provider rules, the flow's state and nonce handling, and the permissions on the group association tabs. Requires FOGProject/fog-workflows#16 on main. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_017aBSWrDArXHTpKWkkN27LR --- .github/workflows/tests.yml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/tests.yml diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml new file mode 100644 index 0000000..f7c39c2 --- /dev/null +++ b/.github/workflows/tests.yml @@ -0,0 +1,22 @@ +name: Tests + +# A pull_request trigger can only fire from the repository the PR is opened +# against, so this stub has to live here even though the runner lives in +# FOGProject/fog-workflows. It is deliberately six lines: all of the logic is +# in the reusable workflow, so fixing the runner does not mean editing this +# file. +# +# The sibling of fogproject's own .github/workflows/tests.yml, pointing at a +# different reusable -- that one installs efitools for a shell test this +# repository does not have. +# +# Not a push trigger, and not because of caution: the runaway that put ~30 +# commits on fogproject's dev-branch in 20 minutes happened because the +# triggered workflow pushed a commit back. This one only reads. + +on: + pull_request: + +jobs: + suite: + uses: FOGProject/fog-workflows/.github/workflows/fog-plugins-tests.yml@main