fix: avoid unsafe yaml load in conformance tests #161
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: OpenTelemetry Conformance Tests | |
| # Per-PR OpenTelemetry conformance run. Calls the shared orchestrator in | |
| # aws-durable-execution-conformance-tests and points it at this repo's own handlers and | |
| # templates (packages/aws-durable-execution-sdk-python-conformance-tests-otel/) through | |
| # examples_dir, so the handlers run from the commit under test while the orchestration | |
| # (backend matrix, ADOT layer, collector build, long-running cycle) stays centralized. | |
| on: | |
| pull_request: | |
| branches: ["main"] | |
| paths: | |
| - "packages/aws-durable-execution-sdk-python/**" | |
| - "packages/aws-durable-execution-sdk-python-otel/**" | |
| - "packages/aws-durable-execution-sdk-python-conformance-tests-otel/**" | |
| - ".github/workflows/opentelemetry-conformance-tests.yml" | |
| push: | |
| branches: ["main"] | |
| paths: | |
| - "packages/aws-durable-execution-sdk-python/**" | |
| - "packages/aws-durable-execution-sdk-python-otel/**" | |
| - "packages/aws-durable-execution-sdk-python-conformance-tests-otel/**" | |
| - ".github/workflows/opentelemetry-conformance-tests.yml" | |
| workflow_dispatch: | |
| inputs: | |
| phase: | |
| description: Run short tests, launch a long run, or check the active long run | |
| required: true | |
| default: short | |
| type: choice | |
| options: | |
| - short | |
| - launch | |
| - check | |
| delay_seconds: | |
| description: Durable delay in seconds (1-86400, launch only) | |
| required: true | |
| default: "82800" | |
| type: string | |
| aws_region: | |
| description: AWS region | |
| required: true | |
| default: us-west-2 | |
| type: string | |
| conformance_test_ref: | |
| description: Conformance test commit SHA or branch name | |
| required: true | |
| default: main | |
| type: string | |
| permissions: {} | |
| jobs: | |
| opentelemetry: | |
| permissions: | |
| actions: write | |
| contents: read | |
| id-token: write | |
| uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@8de1bbfdccfeb36d5f9ccee99f21533f0bcb1d72 | |
| with: | |
| language: python | |
| resource_prefix: p | |
| sdk_repository: aws/aws-durable-execution-sdk-python | |
| sdk_ref: ${{ github.event.pull_request.head.sha || github.sha }} | |
| conformance_test_ref: ${{ inputs.conformance_test_ref || 'main' }} | |
| # Check the SDK out so the handlers and templates below are on disk. The handlers | |
| # themselves are installed from sdk_ref by src/requirements.txt during the SAM build. | |
| checkout_sdk: true | |
| # Path is relative to the conformance workspace, where the SDK is checked out at | |
| # .build/durable-sdk. | |
| examples_dir: .build/durable-sdk/packages/aws-durable-execution-sdk-python-conformance-tests-otel | |
| adot_release_repository: aws-observability/aws-otel-python-instrumentation | |
| collector_compatible_runtime: python3.13 | |
| collector_otlp_endpoint: http://localhost:4318 | |
| suite_timeout_minutes: 30 | |
| phase: ${{ inputs.phase || 'short' }} | |
| delay_seconds: ${{ inputs.delay_seconds || '82800' }} | |
| aws_region: ${{ inputs.aws_region || 'us-west-2' }} | |
| secrets: | |
| CONFORMANCE_TEST_ROLE_ARN: ${{ secrets.TEST_ROLE_ARN }} | |
| CONFORMANCE_TEST_ACCOUNT_ID: ${{ secrets.TEST_ACCOUNT_ID }} | |
| CONFORMANCE_TEST_LAMBDA_EXECUTION_ROLE_ARN: ${{ secrets.TEST_LAMBDA_EXECUTION_ROLE_ARN }} | |
| DASH0_AUTH_TOKEN: ${{ secrets.DASH0_AUTH_TOKEN }} | |
| DATADOG_ACCESS_TOKEN: ${{ secrets.DATADOG_ACCESS_TOKEN }} | |
| DATADOG_API_KEY: ${{ secrets.DATADOG_API_KEY }} | |
| DATADOG_APPLICATION_KEY: ${{ secrets.DATADOG_APPLICATION_KEY }} |