diff --git a/.github/workflows/qcom-preflight-checks.yml b/.github/workflows/qcom-preflight-checks.yml index 56b483b2f3d1..d2bcc208bd44 100644 --- a/.github/workflows/qcom-preflight-checks.yml +++ b/.github/workflows/qcom-preflight-checks.yml @@ -1,31 +1,25 @@ -name: Qualcomm Preflight Checks +name: QC Preflight Checks + on: - # FIXME: these branch targets might need to be revisited to make this work - # as we create new release branches. - pull_request_target: - branches: - - 'qualcomm-software' - - 'release/qualcomm-software/**' + pull_request: + branches: [qualcomm-software, release/qualcomm-software/**] push: - branches: - - 'qualcomm-software' - - 'release/qualcomm-software/**' + branches: [qualcomm-software, release/qualcomm-software/**] workflow_dispatch: -permissions: - contents: read - security-events: write - jobs: - qcom-preflight-checks: - if: github.repository == 'qualcomm/cpullvm-toolchain' - uses: qualcomm/qcom-reusable-workflows/.github/workflows/qcom-preflight-checks-reusable-workflow.yml@v1.1.4 + preflight: + name: Run QC Preflight Checks + uses: qualcomm/qcom-reusable-workflows/.github/workflows/reusable-qcom-preflight-checks-orchestrator.yml@v2 with: - # ✅ Preflight Checkers - repolinter: false # default: true - semgrep: true # default: true - copyright-license-detector: true # default: true - pr-check-emails: true # default: true - dependency-review: true # default: true - secrets: - SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} + enable-semgrep-scan: true + enable-dependency-review: true + enable-repolinter-check: false + enable-copyright-license-check: true + enable-commit-email-check: true + enable-commit-msg-check: false + enable-armor-checkers: false + + permissions: + contents: read + security-events: write