Skip to content

ci: make CDK checks anonymous so they run on fork PRs - #144

Merged
maxrjones merged 2 commits into
developmentseed:mainfrom
maxrjones:ci/fork-safe-cdk-checks
Aug 18, 2026
Merged

ci: make CDK checks anonymous so they run on fork PRs#144
maxrjones merged 2 commits into
developmentseed:mainfrom
maxrjones:ci/fork-safe-cdk-checks

Conversation

@maxrjones

Copy link
Copy Markdown
Member

Summary

This PR changes the CDK Checks workflow to run outside the dev environment, using dummy env variables, so that it can be safely tested on PRs coming from forks.

Testing

No local testing, will try out the label that triggers the workflow.

PR checks

  • Standard CI runs automatically on each push.
  • To run the CDK synth check, add the run-cdk-checks label to this PR.
  • If you push more commits after that run completes, remove and re-add the label to run it again.
  • To trigger a dev deployment, add the deploy-dev label. It smoke-tests tiles from the native MUR, virtual MUR, and virtual NLDAS Icechunk stores after deployment.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

@hrodmn hrodmn left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks great but we should update it so that changes to the re-usable workflow file (.github/actions/cdk-deploy/action.yml) will trigger the synth test.

Comment thread .github/workflows/cdk-checks.yml Outdated
Comment on lines +39 to +41
if echo "$files" | grep -q '^\.github/workflows/cdk-checks\.yml$'; then
# this workflow itself changed
echo "run=true" >> "$GITHUB_OUTPUT"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we should also run the workflow if .github/actions/cdk-deploy/action.yml changes

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good call, done in 2a4f99c

@maxrjones
maxrjones requested a review from hrodmn August 18, 2026 14:56
@maxrjones
maxrjones merged commit d8b27d5 into developmentseed:main Aug 18, 2026
10 checks passed
@maxrjones
maxrjones deleted the ci/fork-safe-cdk-checks branch August 18, 2026 15:12
@maxrjones maxrjones self-assigned this Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants