Integration tests for loft-sh/github-actions reusable workflows.
This repo contains caller workflows that exercise each reusable workflow from
loft-sh/github-actions@main. Tests are triggered in two ways:
repository_dispatch— sent automatically byloft-sh/github-actionsafter merging changes to reusable workflows.workflow_dispatch— manual trigger for on-demand testing.
| Workflow | Tests |
|---|---|
caller-validate-renovate.yaml |
validate-renovate.yaml |
caller-actionlint.yaml |
actionlint.yaml |
caller-detect-changes.yaml |
detect-changes.yaml |
caller-backport.yaml |
backport.yaml |
caller-clean-github-cache.yaml |
clean-github-cache.yaml |
caller-cleanup-backport-branches.yaml |
cleanup-backport-branches.yaml |
caller-secret-broker-request.yaml |
creates and queues a short-lived broker request |
caller-secret-broker-response.yaml |
secret-broker-request action |
demo-command.yaml and demo-suite.yaml are a minimal, commented example of a
PR comment command built on comment-triggered-check. Copy both to add a
command to another repository. Comment on any PR here:
| Comment | Check result |
|---|---|
/demo-e2e ok |
passes |
/demo-e2e fail |
fails |
/demo-e2e nothing |
"Nothing to run" |
/demo-e2e (ok |
no check; a reply explains the unbalanced parenthesis |
integration-tests.yaml runs all E2E tests in parallel, creating real PRs,
branches, and GitHub events to exercise each workflow end-to-end.
| Secret | Purpose |
|---|---|
GH_ACCESS_TOKEN |
PAT with repo scope for creating PRs, merging, deleting branches |
AUTH_APP_PRIVATE_KEY |
Private key for the Members read-only authorization App |
The secret broker integration also needs AUTH_APP_CLIENT_ID as an Actions
variable. Run caller-secret-broker-request.yaml manually. Its authenticated
push starts the source workflow, then the response workflow tests active
membership, fail-closed denial, immutable request validation, the private
preflight bundle, atomic claim, and replay rejection against the real GitHub
API. It performs no secret-store read.