lint-poster.yml

name: lint-poster

on:
  workflow_run:
    workflows: [ "lint-tidier" ]
    types: [ completed ]

jobs:
  lint-poster-job:
    # Trigger the job only if the previous (insecure) workflow completed successfully
    if: ${{ github.event.workflow_run.conclusion == 'success' }}
    runs-on: ubuntu-latest
    steps:
      - name: Download analysis results
        uses: actions/github-script@v3.1.0
        with:
          script: |
            let artifacts = await github.actions.listWorkflowRunArtifacts({
                owner: context.repo.owner,
                repo: context.repo.repo,
                run_id: ${{github.event.workflow_run.id }},
            });
            let matchArtifact = artifacts.data.artifacts.filter((artifact) => {
                return artifact.name == "linter-result"
            })[0];
            let download = await github.actions.downloadArtifact({
                owner: context.repo.owner,
                repo: context.repo.repo,
                artifact_id: matchArtifact.id,
                archive_format: "zip",
            });
            let fs = require("fs");
            fs.writeFileSync("${{github.workspace}}/linter-result.zip", Buffer.from(download.data));

      - name: Set environment variables
        run: |
          mkdir linter-result
          unzip linter-result.zip -d linter-result
          echo "pr_id=$(cat linter-result/pr-id.txt)" >> $GITHUB_ENV
          echo "pr_head_repo=$(cat linter-result/pr-head-repo.txt)" >> $GITHUB_ENV
          echo "pr_head_ref=$(cat linter-result/pr-head-ref.txt)" >> $GITHUB_ENV

      - uses: actions/checkout@v3
        with:
          repository: ${{ env.pr_head_repo }}
          ref: ${{ env.pr_head_ref }}
          persist-credentials: false

      - name: Redownload analysis results
        uses: actions/github-script@v3.1.0
        with:
          script: |
            let artifacts = await github.actions.listWorkflowRunArtifacts({
                owner: context.repo.owner,
                repo: context.repo.repo,
                run_id: ${{github.event.workflow_run.id }},
            });
            let matchArtifact = artifacts.data.artifacts.filter((artifact) => {
                return artifact.name == "linter-result"
            })[0];
            let download = await github.actions.downloadArtifact({
                owner: context.repo.owner,
                repo: context.repo.repo,
                artifact_id: matchArtifact.id,
                archive_format: "zip",
            });
            let fs = require("fs");
            fs.writeFileSync("${{github.workspace}}/linter-result.zip", Buffer.from(download.data));

      - name: Extract analysis results
        run: |
          mkdir linter-result
          unzip linter-result.zip -d linter-result

      - name: Run clang-tidy-pr-comments action
        uses: platisd/clang-tidy-pr-comments
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          clang_tidy_fixes: linter-result/fixes.yml
          pull_request_id: ${{ env.pr_id }}
          request_changes: true