Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add workflow monitor to all workflows #5733

Merged
merged 1 commit into from
Jun 25, 2024

Conversation

andrewlock
Copy link
Member

@andrewlock andrewlock commented Jun 24, 2024

Summary of changes

Add GitHub's workflow monitor to our workflows

Reason for change

#5728 changes all the permissions for GitHub actions but it's risky - if we have the permissions wrong, then workflows will break. Monitor tells you what you're using (With big caveats) so it would be wise to use that before going all-in on #5728.

Implementation details

Add the monitor to all our actions as described in the docs.

Later (ideally after a release) we'll use the local tool to see what it says.

Note that the monitor doesn't audit GraphQL or Windows workflows, so we're going to be 🤞 with this either way...

Test coverage

This is the test coverage for #5728

Other details

@andrewlock andrewlock added the area:builds project files, build scripts, pipelines, versioning, releases, packages label Jun 24, 2024
@andrewlock andrewlock requested a review from a team as a code owner June 24, 2024 16:02
@lucaspimentel lucaspimentel requested a review from a team June 24, 2024 18:14
@andrewlock andrewlock merged commit 4429b42 into master Jun 25, 2024
88 checks passed
@andrewlock andrewlock deleted the andrew/ci/add-workflow-monitor branch June 25, 2024 07:08
@github-actions github-actions bot added this to the vNext-v2 milestone Jun 25, 2024
andrewlock added a commit that referenced this pull request Jun 26, 2024
andrewlock added a commit that referenced this pull request Jul 1, 2024
## Summary of changes

Reverts the workflow monitor

## Reason for change

It appears to absolutely _cripple_ the GitHub action network speed.
Actions have been failing on master ever since we merged this PR, but
here are some examples:

Checkout stage
- Before: 9s
- After: 3min 30s

Install .NET stage 
- Before: 7s
- After: 7min

Download Azure Build assets
- Before: 40s (it's _big_)
- After: timeout after 140s

## Implementation details

Revert the monitor, we'll have to YOLO the permissions changes with what
we have

## Test coverage

I've tested this is the cause by disabling it using the variable. But if
it's disabled, there's kind of no point in including it in the
workflows, so may as well tear it out

## Other details

grmbl grmbl, gonna have to just YOLO our permission changes in that case

<!-- ⚠️ Note: where possible, please obtain 2 approvals prior to
merging. Unless CODEOWNERS specifies otherwise, for external teams it is
typically best to have one review from a team member, and one review
from apm-dotnet. Trivial changes do not require 2 reviews. -->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:builds project files, build scripts, pipelines, versioning, releases, packages
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants