open-standards/.github/workflows/wai-key-proxy.yml
Transaction Science 0c35ab1798
Some checks failed
joule-moq-room room service / joule-moq-room · does this change touch it (push) Successful in 41s
wai-app and Create / wai-app · does this change touch it (push) Successful in 28s
joule-moq-web browser client / joule-moq-web · does this change touch it (push) Successful in 31s
wai-audit collector and player integration / does this change touch it (push) Successful in 20s
wai-ledger service / does this change touch it (push) Successful in 32s
wai-key-proxy / does this change touch it (push) Successful in 33s
wai-fleet service / does this change touch it (push) Successful in 34s
WAI Studio / does this change touch it (push) Successful in 33s
joule-code conformance gate / joule-moq-relay, its own energy on a counter (macos) (push) Successful in 42s
WAI breaking changes and the conformance runner / WAI breaking · does this change touch WAI (push) Successful in 8s
joule-code conformance gate / Build + round-trip C1-C4 vectors (push) Successful in 3m53s
wai-audit collector and player integration / collector, player integration and the browser end to end · macos (push) Successful in 2m30s
wai-app and Create / wai-app · Create, browser end-to-end (macos) (push) Successful in 5m55s
wai-ledger service / service · macos (push) Successful in 2m0s
joule-code conformance gate / joule-moq-relay, every target (push) Has been cancelled
joule-code conformance gate / joule-moq-ingest, every target (push) Has been cancelled
joule-moq-room room service / joule-moq-room, every target (push) Has been cancelled
repository checks / lockfiles, advisories, tests in CI, workflow hygiene, spec and section references, public text (push) Has been cancelled
wai-app and Create / wai-app · tests, clippy, the line language's verifier (linux) (push) Has been cancelled
wai-fleet service / service · linux (push) Has been cancelled
wai-fleet service / service · macos (push) Has been cancelled
joule-moq-web browser client / joule-moq-web · browser end-to-end (macos) (push) Has been cancelled
wai-audit collector and player integration / collector · linux (push) Successful in 1m37s
WAI Studio / Studio in Chromium and Firefox · macos (push) Successful in 12m14s
wai-ledger service / service · linux (push) Successful in 2m39s
wai-key-proxy / proxy · linux (push) Successful in 2m2s
WAI Studio / the catalogue's actions, the unit tests and the core · linux (push) Successful in 1m54s
WAI breaking changes and the conformance runner / WAI breaking · wire, record and API against main · linux (push) Successful in 1m0s
WAI breaking changes and the conformance runner / WAI breaking and conform · their tests, and the independent verifiers through wai conform · linux (push) Successful in 4m33s
WAI Studio / Studio in WebKit · linux (push) Has been cancelled
wai-audit.yml runs wai-metrics' tests, and a change to the crate runs every service built on it
No workflow named wai-metrics, so its unit tests and doc test ran in no job and a change to
it ran nothing. The Linux job of wai-audit.yml now runs both, with clippy, and fails unless
both results are there. wai/wai-metrics/** is in the push and pull request filters of
wai-audit, wai-ledger, wai-fleet, wai-key-proxy, joule-moq-room and joule-code-conformance,
the workflows that test the six services answering GET /metrics.

wai-key-proxy.yml held the end-to-end file to exactly two tests. It now has seven, and the job
says so.

Changelog: none
Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-07 01:54:34 -05:00

90 lines
3.1 KiB
YAML

name: wai-key-proxy
# The signing proxy and key server of extensions/key-release.md (wai/wai-key-proxy): its
# tests, which run the proxy, the key server and a fixture licence server on loopback, clippy
# with warnings as errors, and the release binary run end to end by smoke.sh.
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
on:
push:
branches: [main]
paths:
- 'wai/wai-key-proxy/**'
- 'wai/wai-metrics/**'
- 'wai/wai-rs/src/key_release.rs'
- 'wai/wai-rs/src/key_release/**'
- 'wai/wai-rs/src/wai_video_keys.rs'
- 'wai/wai-rs/Cargo.toml'
- 'wai/live-conformance/keys/**'
- 'rust-toolchain.toml'
- '.github/workflows/wai-key-proxy.yml'
pull_request:
paths:
- 'wai/wai-key-proxy/**'
- 'wai/wai-metrics/**'
- 'wai/wai-rs/src/key_release.rs'
- 'wai/wai-rs/src/key_release/**'
- 'wai/wai-rs/src/wai_video_keys.rs'
- 'wai/wai-rs/Cargo.toml'
- 'wai/live-conformance/keys/**'
- 'rust-toolchain.toml'
- '.github/workflows/wai-key-proxy.yml'
jobs:
relevant:
name: does this change touch it
runs-on: gate
outputs:
run: ${{ steps.gate.outputs.run }}
steps:
- uses: actions/checkout@v5
with:
fetch-depth: 0
- id: gate
run: |
set -euo pipefail
r=$(python3 scripts/pr-touches-paths.py .github/workflows/wai-key-proxy.yml \
"${{ github.event.pull_request.base.sha }}" \
"${{ github.event.pull_request.head.sha }}")
echo "this change touches wai-key-proxy: $r"
echo "run=$r" >> "$GITHUB_OUTPUT"
proxy-linux:
name: proxy · linux
needs: relevant
if: needs.relevant.outputs.run == 'true'
runs-on: linux
timeout-minutes: 60
steps:
- uses: actions/checkout@v5
- name: Install Rust 1.99.1
shell: bash
run: |
export PATH="$HOME/.cargo/bin:$PATH"
command -v rustup >/dev/null 2>&1 || \
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain 1.99.1
rustup toolchain install 1.99.1 --profile minimal --component clippy
rustup default 1.99.1
echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"
- name: Tests and clippy
shell: bash
working-directory: wai/wai-key-proxy
run: |
set -euo pipefail
cargo test --locked 2>&1 | tee "$RUNNER_TEMP/test.log"
grep -qE '^test result: ok\. 7 passed; 0 failed' "$RUNNER_TEMP/test.log" || { echo "::error::the end-to-end tests did not run"; exit 1; }
cargo clippy --locked --all-targets -- -D warnings
# smoke.sh runs a fixture licence server and picks free ports with Python.
- uses: actions/setup-python@v5
with:
python-version: '3.11'
- name: The release binary end to end
shell: bash
working-directory: wai/wai-key-proxy
run: |
set -euo pipefail
cargo build --locked --release
bash smoke.sh