ci: add script to automatically update the project from upstream every day

Author: JeromeBu

.github/workflows/ci.yaml

@@ -88,15 +88,19 @@ jobs:
       cancel-in-progress: true
     needs:
       - check_if_version_upgraded
+<<<<<<< HEAD
     if: needs.check_if_version_upgraded.outputs.is_upgraded_in_preprod == 'true'
+=======
+    if: needs.check_if_version_upgraded.outputs.is_upgraded_version == 'true'
+>>>>>>> 0b3f684d (ci: add script to automatically update the project from upstream every day)
     env:
       TO_VERSION: ${{ needs.check_if_version_upgraded.outputs.to_version }}
     steps:
       - run: echo "Triggering production deploy"
       - name: Set up SSH
         run: |
           mkdir -p ~/.ssh
-          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
+          echo "$SSH_PRIVATE_KEY" > ~/.ssh/id_ed25519
           chmod 600 ~/.ssh/id_ed25519
           ssh-keyscan code.gouv.fr >> ~/.ssh/known_hosts
           
@@ -128,14 +132,15 @@ jobs:
     needs:
       - trigger_pre_production_deploy
       - check_if_version_upgraded
+    if: needs.check_if_version_upgraded.outputs.is_upgraded_version == 'true'
     env:
       TO_VERSION: ${{ needs.check_if_version_upgraded.outputs.to_version }}
     steps:
       - run: echo "Triggering production deploy"
       - name: Set up SSH
         run: |
           mkdir -p ~/.ssh
-          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
+          echo "$SSH_PRIVATE_KEY" > ~/.ssh/id_ed25519
           chmod 600 ~/.ssh/id_ed25519
           ssh-keyscan code.gouv.fr >> ~/.ssh/known_hosts
           ssh -o StrictHostKeyChecking=no [email protected] "bash -c 'eval \"\$(ssh-agent -s)\" && ssh-add ~/.ssh/sill-data && ./update-sill-docker-compose.sh v${{ env.TO_VERSION }}'"

.github/workflows/sync-upstream.yaml

@@ -0,0 +1,35 @@
+name: Sync upstream
+
+on:
+  schedule:
+    - cron: '0 7 * * *' # every day at 7 AM UTC
+  workflow_dispatch:
+
+jobs:
+  sync:
+    name: Sync repository with upstream repository
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout fork
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PAT_FOR_UPSTREAM_SYNC }}
+          fetch-depth: 0
+
+      - name: Configure Git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Add upstream remote
+        run: |
+          git remote add upstream https://github.com/codegouvfr/sill.git
+          git fetch upstream
+
+      - name: Sync with upstream/main
+        run: |
+          git checkout main
+          git rebase upstream/main
+
+      - name: Push to origin
+        run: git push origin main --force-with-lease --no-verify