Auto Update Orchestrator #28
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Auto Update Orchestrator | |
on: | |
schedule: | |
# Tuesday 6pm ET (22:00 UTC, accounting for EST/EDT) | |
- cron: '0 22 * * 2' | |
workflow_dispatch: {} # Manual trigger for testing | |
jobs: | |
update-docs: | |
name: Update Documentation | |
# Restrict to home repository and main branch only for security | |
if: github.repository == 'KemingHe/python-dependency-manager-companion-mcp-server' && github.ref == 'refs/heads/main' | |
permissions: | |
contents: write # Required: commit documentation updates | |
uses: ./.github/workflows/auto-update-docs.yml | |
update-index: | |
name: Update Search Index | |
needs: update-docs | |
# Restrict to home repository and main branch only for security | |
if: github.repository == 'KemingHe/python-dependency-manager-companion-mcp-server' && github.ref == 'refs/heads/main' | |
permissions: | |
contents: write # Required: commit search index updates | |
uses: ./.github/workflows/auto-update-index.yml | |
publish: | |
name: Publish Image | |
needs: update-index | |
# Restrict to home repository and main branch only for security | |
if: github.repository == 'KemingHe/python-dependency-manager-companion-mcp-server' && github.ref == 'refs/heads/main' | |
permissions: | |
contents: read # Minimum: checkout repository | |
attestations: write # Required: artifact attestation | |
id-token: write # Required: OIDC token for attestation | |
uses: ./.github/workflows/auto-update-publish.yml | |
secrets: inherit # Required for workflow accessing env secrets |