master.yml

name: ✨ master

on:
  push:
    branches:
      - master
      - demo
    paths-ignore:
      - 'developer-preview/**'

permissions:
  id-token: write

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  validate_descriptors:
    name: 🔎 validate descriptors
    runs-on: public-ledgerhq-shared-small
    timeout-minutes: 60
    steps:

      - name: Checkout
        timeout-minutes: 10
        uses: actions/checkout@v4

      - name: Get API keys
        timeout-minutes: 10
        shell: bash
        run: |
          cat << EOF | jq -r 'to_entries[] | select(.key|endswith("_API_KEY")) | "\(.key)=\(.value)"' >> "$GITHUB_ENV"
          ${{ toJSON(secrets) }}
          EOF

      - name: Setup python
        timeout-minutes: 10
        uses: actions/setup-python@v5
        with:
          python-version: '3.12'
          cache: 'pip'

      - name: Login to Ledger JFrog
        timeout-minutes: 10
        uses: LedgerHQ/actions-security/actions/jfrog-login@actions/jfrog-login-1

      - name: Setup pip
        timeout-minutes: 10
        run: jf pipc --global --repo-resolve=virtual-pypi-prod-green

      - name: Install ERC-7730 library
        timeout-minutes: 10
        run: jf pip install erc7730

      - name: Validate ERC-7730 descriptors
        timeout-minutes: 10
        run: erc7730 lint registry --gha

  update_cal:
    name: 🔁 trigger updates
    runs-on: public-ledgerhq-shared-small
    timeout-minutes: 60
    steps:

      - name: Trigger update on LedgerHQ/crypto-assets
        if: ${{ !cancelled() }}
        timeout-minutes: 60
        uses: peter-evans/repository-dispatch@v3
        with:
          token: ${{ secrets.CI_BOT_TOKEN }}
          repository: LedgerHQ/crypto-assets
          event-type: submodules

      - name: Trigger update on LedgerHQ/crypto-assets-clear-signing-initiative
        if: ${{ !cancelled() }}
        timeout-minutes: 60
        uses: peter-evans/repository-dispatch@v3
        with:
          token: ${{ secrets.CI_BOT_TOKEN }}
          repository: LedgerHQ/crypto-assets-clear-signing-initiative
          event-type: submodules

      - name: Trigger update on LedgerHQ/python-erc7730
        if: ${{ !cancelled() }}
        timeout-minutes: 60
        uses: peter-evans/repository-dispatch@v3
        with:
          token: ${{ secrets.CI_BOT_TOKEN }}
          repository: LedgerHQ/python-erc7730
          event-type: submodules