Repository navigation

Run PHP 8.4 and 8.5 checks in pinned official containers #462

	name: published SDK namespaces

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: sdk-namespaces-${{ github.event_name }}-${{ github.event_name == 'pull_request' && github.ref \|\| github.sha }}
	cancel-in-progress: ${{ github.event_name == 'pull_request' }}

	jobs:
	namespaces:
	name: Rust namespaces, principals and spoofing refusal
	runs-on: ubuntu-latest
	timeout-minutes: 20
	env:
	SDK_NAMESPACES_COMPOSE_PROJECT_NAME: sample-app-sdk-namespaces-${{ github.run_id }}-${{ github.run_attempt }}
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

	- name: Check out the accepted central build source
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	repository: durable-workflow/.github
	ref: 18783be6bef737cc778e4c7282a8797e39daa61a
	path: .central-apt-source
	persist-credentials: false
	- name: Resolve the exact published tuple
	run: scripts/resolve-current-artifacts.sh >> "$GITHUB_ENV"
	- name: Run the documented namespace experiment
	run: SDK_NAMESPACES_RESULT_DIR="$RUNNER_TEMP/sdk-namespaces-proof" scripts/sdk-namespaces.sh
	- name: Retain histories, injected requests and physical worker loss
	if: always()
	uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
	with:
	name: sdk-namespaces-${{ github.run_id }}-${{ github.run_attempt }}
	path: ${{ runner.temp }}/sdk-namespaces-proof
	if-no-files-found: warn
	retention-days: 30