From 707ad0f7aff434bc1ce8b4eea08c4309b11cded3 Mon Sep 17 00:00:00 2001 From: Omer Lachish Date: Fri, 20 Feb 2026 12:21:01 +0000 Subject: [PATCH 1/2] use DECO_TEST_APPROVAL app for integration test check runs --- .github/workflows/push.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index 1c06b88db9..734186890e 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -394,6 +394,17 @@ jobs: owner: ${{ secrets.ORG_NAME }} repositories: ${{ secrets.REPO_NAME }} + - name: Generate GitHub App Token (check runs) + if: >- + (github.event_name == 'merge_group') || + (github.event_name == 'pull_request' && !contains(fromJSON(needs.testmask.outputs.targets), 'test')) + id: generate-check-token + uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6 + with: + app-id: ${{ secrets.DECO_TEST_APPROVAL_APP_ID }} + private-key: ${{ secrets.DECO_TEST_APPROVAL_PRIVATE_KEY }} + owner: databricks + # Trigger integration tests if the primary "test" target is triggered by this change. - name: Trigger integration tests (pull request) if: ${{ github.event_name == 'pull_request' && (contains(fromJSON(needs.testmask.outputs.targets), 'test') || contains(fromJSON(needs.testmask.outputs.targets), 'test-exp-ssh')) }} @@ -411,6 +422,7 @@ jobs: if: ${{ github.event_name == 'pull_request' && !contains(fromJSON(needs.testmask.outputs.targets), 'test') && !contains(fromJSON(needs.testmask.outputs.targets), 'test-exp-ssh') }} uses: actions/github-script@v8 with: + github-token: ${{ steps.generate-check-token.outputs.token }} script: | await github.rest.checks.create({ owner: context.repo.owner, @@ -431,6 +443,7 @@ jobs: if: ${{ github.event_name == 'merge_group' }} uses: actions/github-script@v8 with: + github-token: ${{ steps.generate-check-token.outputs.token }} script: | await github.rest.checks.create({ owner: context.repo.owner, From 2985d695ed2970e3161c1b46b21ec6ea0b8e7ce0 Mon Sep 17 00:00:00 2001 From: Omer Lachish Date: Tue, 17 Mar 2026 10:48:45 +0000 Subject: [PATCH 2/2] scope DECO_TEST_APPROVAL token to cli repo --- .github/workflows/push.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index 734186890e..ecd455db02 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -403,7 +403,9 @@ jobs: with: app-id: ${{ secrets.DECO_TEST_APPROVAL_APP_ID }} private-key: ${{ secrets.DECO_TEST_APPROVAL_PRIVATE_KEY }} + # DECO_TEST_APPROVAL is installed on the databricks org (not databricks-eng). owner: databricks + repositories: cli # Trigger integration tests if the primary "test" target is triggered by this change. - name: Trigger integration tests (pull request)