convertKqlFunctionYamlToArmTemplate.yaml

# Each pull request that updates ASIM parsers triggers the script.
# The script generates deployable ARM templates based on ASim parsers YAML files and pushes them to the pull request branch.
name: Convert Kql function yaml to ARM template
on:
  pull_request:
    types: [opened, edited, reopened, synchronize, labeled]
    paths:
       - 'Parsers/ASimDns/Parsers/**'
       - 'Parsers/ASimNetworkSession/Parsers/**'
       - 'Parsers/ASimWebSession/Parsers/**'
       - 'Parsers/ASimProcessEvent/Parsers/**'
       - 'Parsers/ASimAuditEvent/Parsers/**'
       - 'Parsers/ASimAuthentication/Parsers/**'
       - 'Parsers/ASimFileEvent/Parsers/**'
       - 'Parsers/ASimRegistryEvent/Parsers/**'
       - 'Parsers/ASimUserManagement/Parsers/**'
       - 'Parsers/ASimDhcpEvent/Parsers/**'
       - 'Parsers/ASimAlertEvent/Parsers/**'

env:
  GITHUB_APPS_ID: "${{ secrets.APPLICATION_ID }}"
  GITHUB_APPS_KEY: "${{ secrets.APPLICATION_PRIVATE_KEY }}"

jobs:
  kqlFuncYaml2Arm:
    # The workflow should not run on forked repositories for security reasons
    if: ${{ !github.event.pull_request.head.repo.fork }}
    runs-on: ubuntu-latest
    steps:
      - name: Generate a token
        id: generate_token
        uses: actions/create-github-app-token@46e4a501e119d39574a54e53a06c9a705efc55c9
        with:
          app-id: ${{ env.GITHUB_APPS_ID }}
          private-key: ${{ env.GITHUB_APPS_KEY }}

      - name: Checkout pull request branch
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
        env:
          GeneratedToken: ${{ steps.generate_token.outputs.token }}
        with:
            token: ${{ env.GeneratedToken}}
            ref: ${{github.event.pull_request.head.ref}}
            repository: ${{github.event.pull_request.head.repo.full_name}}
            persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal access token.
            fetch-depth: 0 # otherwise, there would be errors pushing refs to the destination repository.
      - name: Install python
        uses: actions/setup-python@v3
        with:
            python-version: '3.x'
            architecture: 'x64'
      - name: Install yamale package
        uses: BSFishy/pip-action@v1
        with:
            packages: |
                yamale
      - name: Setup git config
        run: |
          git config --local user.name "github-actions[bot]"
          git config --local user.email "<>"
      - name: Merge master into pull request branch
        run: |
          git merge origin/master
          Conflicts=$(git ls-files -u | wc -l)
          if [ "$Conflicts" -gt 0 ] ; then
            echo "There is a merge conflict. Aborting"
            git merge --abort
            exit 1
          fi
      - name: Run kqlFuncYaml2Arm script
        run: |
          .script/kqlFuncYaml2Arm.ps1
        shell: pwsh  
      - name: Commit changes
        run: |
          # Stage the files and commit
          git add Parsers/*
          if git diff --staged --quiet; then
            echo "armTemplatesChanged=false" >> $GITHUB_ENV
            echo "Arm templates didn't changed, no changes to commit"
          else
            echo "armTemplatesChanged=true" >> $GITHUB_ENV
            git commit -m '[ASIM Parsers] Generate deployable ARM templates from KQL function YAML files.'
            echo "Arm templates were changed. Changes were committed"
          fi
      - name: Push changes
        uses: ad-m/github-push-action@master
        if: ${{ env.armTemplatesChanged == 'true' }}
        with:
            github_token: ${{ steps.generate_token.outputs.token }}
            repository: ${{github.event.pull_request.head.repo.full_name}}
            branch: ${{ github.head_ref }}
      - name: Add comment
        uses: mshick/add-pr-comment@v1
        if: ${{ env.armTemplatesChanged == 'true' }}
        with:
          message: |
            ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files.
            To find the new ARM templates, pull your branch.
          repo-token: ${{ steps.generate_token.outputs.token }}
          repo-token-user-login: 'github-actions[bot]' # The user.login for temporary GitHub tokens
          allow-repeats: false # This is the default