update_supply_chain.yml

name: Update supply chain

on:
  workflow_dispatch:

jobs:
  update:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4
        with:
          # https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs
          # https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#push-using-ssh-deploy-keys
          ssh-key: ${{ secrets.SSH_KEY }}

      # smoelius: The next use of `actions/cache` should match what is in ci.yml.
      - uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/bin/
            ~/.cargo/registry/index/
            ~/.cargo/registry/cache/
            ~/.cargo/git/db/
            ~/.dylint_drivers/
            ~/.rustup/toolchains/
            target/dylint/
          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}

      - name: Install cargo-supply-chain
        run: cargo install cargo-supply-chain || true

      - name: Update supply_chain.json
        run: cargo test -p test-fuzz --test integration supply_chain
        env:
          BLESS: 1

      - name: Create pull request
        uses: peter-evans/create-pull-request@v7
        with:
          title: Update supply_chain.json
          branch: update-supply-chain
          branch-suffix: random
          commit-message: Update supply_chain.json
          token: ${{ secrets.REPO_TOKEN }}