Merge commit (#2221)

* Retire inactive maintainers

Last activity:
2019/07/24 06:25:12 issue_comment.update bakhtin
2018/12/11 14:07:33 issue_comment.update grimadas
2019/12/25 14:09:13 repository_vulnerability_alert.resolve igor-egorov
2019/01/16 12:36:58 issue_comment.update l4l
2018/09/25 11:34:38 issue_comment.update laSinteZ
2018/02/16 15:38:38 issue_comment.update luckychess
2018/07/19 16:06:05 issue_comment.destroy muratovv
2019/02/20 10:16:17 issue_comment.update neewy
2018/12/21 14:47:14 issue_comment.destroy nickaleks
2018/05/03 04:59:54 issue_comment.update Solonets
2018/07/10 13:27:31 issue_comment.update stinger112
2018/06/29 18:16:18 issue_comment.update tyvision
2018/03/20 14:42:37 issue_comment.update victordrobny
2018/03/27 10:07:33 issue_comment.update x3medima17
2017/06/28 05:35:19 org.oauth_app_access_requested yannoban

Signed-off-by: Ry Jones <[email protected]>

* Feature/dops 1651/enable fork build (#2046)

* Add new workflow for forks

Signed-off-by: safinsaf <[email protected]>

* Move to self-hosted runners

Signed-off-by: safinsaf <[email protected]>

* Move to self-hosted runners

Signed-off-by: safinsaf <[email protected]>

* Add deploy steps

Signed-off-by: safinsaf <[email protected]>

* Build all

Signed-off-by: safinsaf <[email protected]>

* Run only one workflow

Signed-off-by: safinsaf <[email protected]>

* Run only one workflow

Signed-off-by: safinsaf <[email protected]>

* Skip not-needed jobs

Signed-off-by: safinsaf <[email protected]>

* Add comments to new checks

Signed-off-by: safinsaf <[email protected]>

* Make the new step first

Signed-off-by: safinsaf <[email protected]>

* Do not allow to change iroha-builder Dockerfile

Signed-off-by: safinsaf <[email protected]>

* Do not allow to change iroha Dockerfile

Signed-off-by: safinsaf <[email protected]>

* Debug iroha workflow not running

Signed-off-by: safinsaf <[email protected]>

* Debug iroha workflow not running

Signed-off-by: safinsaf <[email protected]>

* Show all changed files

Signed-off-by: safinsaf <[email protected]>

* Fetch history of commits for diff

Signed-off-by: safinsaf <[email protected]>

* Try checkout base for mode

Signed-off-by: safinsaf <[email protected]>

* Try checkout v3 on head for diff

Signed-off-by: safinsaf <[email protected]>

* Allow use fork point

Signed-off-by: safinsaf <[email protected]>

* Find fork point

Signed-off-by: safinsaf <[email protected]>

* Find fork point

Signed-off-by: safinsaf <[email protected]>

* Fix finding ancestor

Signed-off-by: safinsaf <[email protected]>

* Try to remove variable in setting new origin

Signed-off-by: safinsaf <[email protected]>

* Fix finding ancestor

Signed-off-by: safinsaf <[email protected]>

* Fix output

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Use export for setting output

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Debug using hardcoded values

Signed-off-by: safinsaf <[email protected]>

* Debug using hardcoded values

Signed-off-by: safinsaf <[email protected]>

* Debug using hardcoded values

Signed-off-by: safinsaf <[email protected]>

* Debug using hardcoded values

Signed-off-by: safinsaf <[email protected]>

* Debug using hardcoded values

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Add comments, replace some anchors

Signed-off-by: safinsaf <[email protected]>

* Remove non-needed job

Signed-off-by: safinsaf <[email protected]>

* Add permissions

Signed-off-by: safinsaf <[email protected]>

* Fix permissions

Signed-off-by: safinsaf <[email protected]>

* Set none to deployments

Signed-off-by: safinsaf <[email protected]>

* Update comments, remove odd steps

Signed-off-by: safinsaf <[email protected]>

* Not allow changing scripts used in dockerfile

Signed-off-by: safinsaf <[email protected]>

* Add new filters

Signed-off-by: safinsaf <[email protected]>

* Debug new filters

Signed-off-by: safinsaf <[email protected]>

* Debug new filters

Signed-off-by: safinsaf <[email protected]>

* Debug new filters

Signed-off-by: safinsaf <[email protected]>

* Refactor to run only by comment

Signed-off-by: safinsaf <[email protected]>

* Refactor to run only by comment

Signed-off-by: safinsaf <[email protected]>

* Refactor to run only by comment

Signed-off-by: safinsaf <[email protected]>

* Try environments

Signed-off-by: safinsaf <[email protected]>

* Add new workflow for forks

Signed-off-by: safinsaf <[email protected]>

* Move to self-hosted runners

Signed-off-by: safinsaf <[email protected]>

* Move to self-hosted runners

Signed-off-by: safinsaf <[email protected]>

* Add deploy steps

Signed-off-by: safinsaf <[email protected]>

* Build all

Signed-off-by: safinsaf <[email protected]>

* Run only one workflow

Signed-off-by: safinsaf <[email protected]>

* Run only one workflow

Signed-off-by: safinsaf <[email protected]>

* Skip not-needed jobs

Signed-off-by: safinsaf <[email protected]>

* Add comments to new checks

Signed-off-by: safinsaf <[email protected]>

* Make the new step first

Signed-off-by: safinsaf <[email protected]>

* Do not allow to change iroha-builder Dockerfile

Signed-off-by: safinsaf <[email protected]>

* Do not allow to change iroha Dockerfile

Signed-off-by: safinsaf <[email protected]>

* Debug iroha workflow not running

Signed-off-by: safinsaf <[email protected]>

* Debug iroha workflow not running

Signed-off-by: safinsaf <[email protected]>

* Show all changed files

Signed-off-by: safinsaf <[email protected]>

* Fetch history of commits for diff

Signed-off-by: safinsaf <[email protected]>

* Try checkout base for mode

Signed-off-by: safinsaf <[email protected]>

* Try checkout v3 on head for diff

Signed-off-by: safinsaf <[email protected]>

* Allow use fork point

Signed-off-by: safinsaf <[email protected]>

* Find fork point

Signed-off-by: safinsaf <[email protected]>

* Find fork point

Signed-off-by: safinsaf <[email protected]>

* Fix finding ancestor

Signed-off-by: safinsaf <[email protected]>

* Try to remove variable in setting new origin

Signed-off-by: safinsaf <[email protected]>

* Fix finding ancestor

Signed-off-by: safinsaf <[email protected]>

* Fix output

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Try fix base origin

Signed-off-by: safinsaf <[email protected]>

* Use export for setting output

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Try saving to file

Signed-off-by: safinsaf <[email protected]>

* Debug using hardcoded values

Signed-off-by: safinsaf <[email protected]>

* Debug using hardcoded values

Signed-off-by: safinsaf <[email protected]>

* Debug using hardcoded values

Signed-off-by: safinsaf <[email protected]>

* Debug using hardcoded values

Signed-off-by: safinsaf <[email protected]>

* Debug using hardcoded values

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Try other action

Signed-off-by: safinsaf <[email protected]>

* Add comments, replace some anchors

Signed-off-by: safinsaf <[email protected]>

* Remove non-needed job

Signed-off-by: safinsaf <[email protected]>

* Add permissions

Signed-off-by: safinsaf <[email protected]>

* Fix permissions

Signed-off-by: safinsaf <[email protected]>

* Set none to deployments

Signed-off-by: safinsaf <[email protected]>

* Update comments, remove odd steps

Signed-off-by: safinsaf <[email protected]>

* Not allow changing scripts used in dockerfile

Signed-off-by: safinsaf <[email protected]>

* Add new filters

Signed-off-by: safinsaf <[email protected]>

* Debug new filters

Signed-off-by: safinsaf <[email protected]>

* Debug new filters

Signed-off-by: safinsaf <[email protected]>

* Debug new filters

Signed-off-by: safinsaf <[email protected]>

* Refactor to run only by comment

Signed-off-by: safinsaf <[email protected]>

* Refactor to run only by comment

Signed-off-by: safinsaf <[email protected]>

* Refactor to run only by comment

Signed-off-by: safinsaf <[email protected]>

* Try environments

Signed-off-by: safinsaf <[email protected]>

* Add require review to iroha-builder and prepare-env

Signed-off-by: safinsaf <[email protected]>

* Update workflow Readme, update comments, remove odd branches, prepare pr for merge

Signed-off-by: safinsaf <[email protected]>

* Change refs to commits in fork workflow

Signed-off-by: safinsaf <[email protected]>

* Test checkout with  hashes

Signed-off-by: safinsaf <[email protected]>

* Remove fix branch

Signed-off-by: safinsaf <[email protected]>

* Remove running build from comment

Signed-off-by: safinsaf <[email protected]>

* Fix potential injection in contexts log

Signed-off-by: safinsaf <[email protected]>

* Try echo instead of cat

Signed-off-by: safinsaf <[email protected]>

* Try jq instead of echo

Signed-off-by: safinsaf <[email protected]>

* Restrict changing dependency script from forks

Signed-off-by: safinsaf <[email protected]>

* Add read only permissions to all jobs that fo not deploy anything

Signed-off-by: safinsaf <[email protected]>

* Add work branch to workflow

Signed-off-by: safinsaf <[email protected]>

* Remove test branch

Signed-off-by: safinsaf <[email protected]>

* Bump protobuf from 3.5.1 to 3.15.0 in /docs/source

Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 3.5.1 to 3.15.0.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/master/generate_changelog.py)
- [Commits](protocolbuffers/protobuf@v3.5.1...v3.15.0)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: Alexander Lednev <[email protected]>
Co-authored-by: Ry Jones <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/_README.md

@@ -6,9 +6,23 @@ GitHub Actions CI for Iroha
 
 ---------------------
 
-USAGE
+### Workflows
+
+There are GitHub Actions Workflows called [`Iroha1`](build-iroha1.src.yml) and [`Iroha1-fork`](build-iroha1-fork.src.yml). 
+
+
+USAGE of Iroha1-fork
 -----
-GitHub Actions Workflow [`Iroha1`](build-iroha1.src.yml) solves task of automated build and deployment Iroha1.
+GitHub Actions Workflow [`Iroha1-fork`](build-iroha1-fork.src.yml) solves task of automated build and deployment of Iroha1 from forks.
+
+Runs on **pull request** from forks to Iroha1 main and development branches.
+
+The workflow is started on pull request creation or update. The workflow is paused on steps that require build of untrusted code. Maintainers are notified to review the code and allow build and deployment. 
+
+
+USAGE of Iroha1
+-----
+GitHub Actions Workflow [`Iroha1`](build-iroha1.src.yml) solves task of automated build and deployment Iroha1 from Hyperledger/iroha repository.
 There are events when it is running:
 - on **pull request** to Iroha1 main and development branches
 - on **push** to main or development branches including event when PR is **merged**
@@ -22,12 +36,17 @@ Default `buildspec` is _`/build all`_
 Build matrix is a way to select among number of configurations to be built.
 Build matrix is generated from buildspec string and handled by script [`chatops-gen-matrix.sh`](./chatops-gen-matrix.sh)
 
-## List of files
+List of files
+-----
 - `build-iroha1.src.yml`
   Main file here. GitHub workflow YAML description with ANCHORS, code is not duplicated.
-  IMPORTANT: regeneration required after after edit, which is automated with pre-commit.
+  IMPORTANT: regeneration required after edit, which is automated with pre-commit.
+- `build-iroha1-fork.src.yml`
+  Same as previous, but for forks
 - `workflows/build-iroha1.yml`
   Result worflow taken by GitHub and generated with make-workflows script. Long file of repeated code. DO NOT EDIT MANUALLY.
+- `workflows/build-iroha1.yml`
+  Same as previous, but for forks
 - `make-workflows.sh`
   A tool to generate workflows/*.yml from *.src.yml - evaluates anchors. [Read the docs](_README.make-workflows.md).
 - `chatops-gen-matrix.sh`
@@ -65,3 +84,9 @@ Build matrix is generated from buildspec string and handled by script [`chatops-
   See docs of make-workflows. Use instead of pre-commit as `ln -s ../../.github/pre-commit-hook.sh .git/hooks/pre-commit`, reserv alternative.
 - `TESTS_ALLOWED_TO_FAIL`
   One day tests of Iroha became failing. To fix CI and postpone fixing tests, this file was invented. It allows CI to pass even when listed tests are failing. DO NOT USE UNLESS YOU DEFINITELY KNOW WHAT'S GOING. KEEP IT EMPTY.
+
+Worth noting
+-----
+None of workflows run for PRs that update only .md and .rst files. As sourse code of Iroha and dependencies do not change, building and testing is redundant.
+
+Forks are not allowed to change `.github` folder, Dockerfiles and scripts in `docker` folder