blob: afaf80be2b2d62330249102503efc7b6998faa9e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
from __future__ import absolute_import, print_function, unicode_literals
from taskgraph.transforms.base import TransformSequence
transforms = TransformSequence()
@transforms.add
def sync_github(config, tasks):
"""Do transforms specific to github-sync tasks."""
for task in tasks:
# Add the secret to the scopes, only in m-c.
# Doing this on any other tree will result in decision task failure
# because m-c is the only one allowed to have that scope.
secret = task["secret"]
if config.params["project"] == "mozilla-central":
task.setdefault("scopes", [])
task["scopes"].append("secrets:get:" + secret)
task["worker"].setdefault("env", {})["GITHUB_SECRET"] = secret
del task["secret"]
yield task
|