Reference the same version of the action not the main

[dcalavrezo-qorix]

      - name: Deploy 🚀
        id: pages-deployment
        uses: eclipse-score/cicd-workflows/.github/actions/deploy-versioned-pages@main
        with:
          source_folder: extracted_docs/html

We shouldn't reference main, but workflow-version

There's a GH Actions limitation though, for which this ticket exists

[AlexanderLanin]

possible transitions

Seems these are the only possible transitions. Discovered/understood in long try-out session with @MaximilianSoerenPollak

%%{ init: { "flowchart": { "defaultRenderer": "dagre" } } }%%

flowchart TD
  UR["user repo"]
  subgraph cicd-workflows
    WF1["workflow"]
    WF2["workflow"]
    A1["action"]
    A2["action"]
    S1["script"]
  end

  %% Versioned user calls
  UR -- "@specific_version" --> WF1
  UR -- "@specific_version" --> A1

  %% Same-version calls
  A1 -- "same version via github.action_path" --> S1
  WF1 -- "same version" --> WF2

  %% impossible calls
  WF2 --> S1
  WF1 --> A1
  WF1 --> S1
  A1 --> A2
  WF2 --> A1
  
  %% Arrow styles (edge indices: 0, 1, 2, 3, ...)
  linkStyle 0 stroke:#4caf50,stroke-width:2px
  linkStyle 1 stroke:#4caf50,stroke-width:2px
  linkStyle 2 stroke:#4caf50,stroke-width:2px
  linkStyle 3 stroke:#4caf50,stroke-width:2px

  linkStyle 4 stroke:#ff1800,stroke-width:2px
  linkStyle 5 stroke:#ff1800,stroke-width:2px
  linkStyle 6 stroke:#ff1800,stroke-width:2px
  linkStyle 7 stroke:#ff1800,stroke-width:2px
  linkStyle 8 stroke:#ff1800,stroke-width:2px

Loading

Summary:

• Wanna use scripts? -> use actions
• Wanna nest yml files? -> use workflows
• Wanna mix both? -> you are screwed

More info & workaround:

• Issue at GitHub (open since 2022): make reference accessible in reusable workflow  actions/toolkit#1264
• Workaround: https://github.com/dariocurr/checkout-called/
  However, that workaround requires id-token: write permissions.
  Hint: id-token is undocumented. See here for docu: Suggested improvements to explanation of id-token: write github/docs#32320

What now?

• I guess we should abandon reusable workflows, since using scripts is more important than nesting yml files
• Let's discuss on Monday

[AlexanderLanin]

We did discuss it, but we forgot that we do have a pressing issue. Currently we use one of the red arrows. Workflow -> Action. We do need to resolve it.

[AlexanderLanin]

Update: by now we need id-token: write anyway for our docs workflows. Therefore dariocurr/checkout-called is a viable option for all the red arrows.