From fd1e0f0f756e9ae36fbc509bc9f2cc384d430229 Mon Sep 17 00:00:00 2001 From: Robert Maynard Date: Wed, 5 Nov 2025 09:08:34 -0500 Subject: [PATCH 1/2] Offer ability for custom_jobs to get license builder scripts --- .github/workflows/custom-job.yaml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/.github/workflows/custom-job.yaml b/.github/workflows/custom-job.yaml index 64051fdc..106155f6 100644 --- a/.github/workflows/custom-job.yaml +++ b/.github/workflows/custom-job.yaml @@ -92,6 +92,11 @@ on: When this is non-empty, that secret's value is used in place of the default repo-level token anywhere that environment variable GH_TOKEN is set. This is especially useful for downloading artifacts from other private repos, which repo tokens do not have access to. + requires_license_builder: + description: "Whether to ensure license builder scripts are provided in 'tools/'" + default: false + type: boolean + required: false defaults: run: @@ -187,6 +192,15 @@ jobs: env: # NEEDS alternative-gh-token-secret_name - API limits need to be for whatever token is used for upload/download. Repo token may be a different pool for rate limits. GH_TOKEN: ${{ inputs.alternative-gh-token-secret-name && secrets[inputs.alternative-gh-token-secret-name] || github.token }} # zizmor: ignore[overprovisioned-secrets] + - name: Get RAPIDS License Builder + if: ${{ inputs.requires_license_builder }} + uses: actions/checkout@v5 + with: + repository: "rapidsai/spdx-license-builder" + ref: "refs/heads/main" + path: "./tool/" + fetch-depth: 0 + persist-credentials: true - name: Run script run: | ulimit -n $(ulimit -Hn) From a97f86ebd4bb828666b5e18b75ac18bbb5dee5c3 Mon Sep 17 00:00:00 2001 From: Robert Maynard Date: Thu, 8 Jan 2026 09:52:28 -0500 Subject: [PATCH 2/2] Apply suggestions from code review Co-authored-by: James Lamb --- .github/workflows/custom-job.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/custom-job.yaml b/.github/workflows/custom-job.yaml index 106155f6..0af5549c 100644 --- a/.github/workflows/custom-job.yaml +++ b/.github/workflows/custom-job.yaml @@ -194,13 +194,13 @@ jobs: GH_TOKEN: ${{ inputs.alternative-gh-token-secret-name && secrets[inputs.alternative-gh-token-secret-name] || github.token }} # zizmor: ignore[overprovisioned-secrets] - name: Get RAPIDS License Builder if: ${{ inputs.requires_license_builder }} - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: repository: "rapidsai/spdx-license-builder" ref: "refs/heads/main" path: "./tool/" fetch-depth: 0 - persist-credentials: true + persist-credentials: false - name: Run script run: | ulimit -n $(ulimit -Hn)