Skip to content

EN #5300 Update to run secure poly setup and generate #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
eneumann merged 11 commits into from
Sep 18, 2025
Merged

EN #5300 Update to run secure poly setup and generate #4

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
68650b9
EN add poly setup and generate step
eneumann Aug 27, 2025
a810b52
EN create package folders for schemas, tabi, and vari
eneumann Aug 27, 2025
dd8f0a0
EN update py to v3.13
eneumann Aug 27, 2025
0c0f6b4
EN #5300 enable secure poly setup and generate
eneumann Sep 17, 2025
732bb75
Merge remote-tracking branch 'upstream/main'
eneumann Sep 17, 2025
183a27d
EN #5300 update env var names to match TS client
eneumann Sep 18, 2025
db6c78b
EN re-order steps so generated bits don't get clobbered by cache
eneumann Sep 18, 2025
3e60f71
EN revert db6c78bb0118e4f878338bddf3b3ca603455a24a
eneumann Sep 18, 2025
dfccc67
EN scope down cache dir
eneumann Sep 18, 2025
bfd912f
EN make cache key more unique for multi env deployments
eneumann Sep 18, 2025
27dc960
EN also cache deployments_revision
eneumann Sep 18, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ To use this action in your workflow:

steps:
- name: Poly Deploy
uses: polyapi/poly-deployment-action-py@v0.0.7
uses: polyapi/poly-deployment-action-py@v0.0.8
with:
poly_api_key: ${{ secrets.POLY_API_KEY }}
poly_api_base_url: ${{ secrets.POLY_API_BASE_URL }}
Expand Down
41 changes: 27 additions & 14 deletions action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -88,23 +88,31 @@ runs:
run: |
cd "${{ inputs.working_directory }}"
POLY_DIR=$(python -c "import polyapi; import os; print(os.path.dirname(polyapi.__file__))")
mkdir -p "$POLY_DIR/poly"
mkdir -p "$POLY_DIR/schemas"
mkdir -p "$POLY_DIR/vari"
mkdir -p "$POLY_DIR/tabi"
touch "$POLY_DIR/poly"/__init__.py
touch "$POLY_DIR/schemas"/__init__.py
touch "$POLY_DIR/vari"/__init__.py
touch "$POLY_DIR/tabi"/__init__.py
echo "poly_dir=$POLY_DIR" >> $GITHUB_ENV

- name: Setup and generate PolyAPI
id: poly_setup
shell: bash
env:
POLY_API_KEY: ${{ inputs.poly_api_key }}
POLY_API_BASE_URL: ${{ inputs.poly_api_base_url }}
run: |
set -euo pipefail
echo "::add-mask::${POLY_API_KEY}"
cd "${{ inputs.working_directory }}"
python -m polyapi setup
python -m polyapi generate --no-types
rm -f .polyapi/config.json ~/.polyapi/config.json 2>/dev/null || true

- name: Restore cached PolyAPI deployments
uses: actions/cache@v4
with:
path: ${{ env.poly_dir }}
key: "${{ runner.os }}-poly-${{ inputs.poly_api_base_url }}"
path: |
${{ env.poly_dir }}/cached_deployables
${{ env.poly_dir }}/deployments_revision
key: "${{ runner.os }}-poly-deployables-${{ inputs.poly_api_base_url }}-${{inputs.working_directory}}"
restore-keys: |
"${{ runner.os }}-poly-"
"${{ runner.os }}-poly-deployables-"

- name: Deploy
id: deploy
Expand All @@ -113,16 +121,21 @@ runs:
POLY_API_KEY: ${{ inputs.poly_api_key }}
POLY_API_BASE_URL: ${{ inputs.poly_api_base_url }}
run: |
set -euo pipefail
echo "::add-mask::${POLY_API_KEY}"
Copy link
Member

@aarongoin aarongoin Sep 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This masking seems handy. Never seen this before. Is this a github feature or just something that echo supports?

Copy link
Member Author

@eneumann eneumann Sep 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, just found that yesterday in the github docs 👇
https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-commands#masking-a-value-in-a-log

cd "${{ inputs.working_directory }}"
python -m polyapi sync
rm -f .polyapi/config.json ~/.polyapi/config.json 2>/dev/null || true

- name: Cache PolyAPI deployments
uses: actions/cache@v4
with:
path: ${{ env.poly_dir }}
key: ${{ runner.os }}-poly-${{ inputs.poly_api_base_url }}
path: |
${{ env.poly_dir }}/cached_deployables
${{ env.poly_dir }}/deployments_revision
key: "${{ runner.os }}-poly-deployables-${{ inputs.poly_api_base_url }}-${{inputs.working_directory}}"
restore-keys: |
${{ runner.os }}-poly-
"${{ runner.os }}-poly-deployables-"

- name: Commit deployment receipts
shell: bash
Expand Down