trezor-firmware/.github/workflows/bot-common-sync.yml

name: "[Bot] sync to trezor-common repository"

on:
  schedule:
    - cron: "0 0 * * *"
  workflow_dispatch:

permissions:
  contents: read

jobs:
  sync-common:
    runs-on: ubuntu-latest
    env:
      BOT_USERNAME: "trezor-bot[bot]"
      BOT_EMAIL: "208941332+trezor-bot[bot]@users.noreply.github.com"
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Generate GitHub App token
        id: trezor-bot-token
        uses: actions/create-github-app-token@v1
        with:
          app-id: ${{ secrets.TREZOR_BOT_APP_ID }}
          private-key: ${{ secrets.TREZOR_BOT_PRIVATE_KEY }}
          owner: ${{ github.repository_owner }}
          repositories: |
            trezor-common

      - name: Copy git-filter and script to temporary directory
        run: |
          cp ./ci/common_sync/common_repo_sync.sh ${{runner.temp}}/common_repo_sync.sh
          cp ./ci/common_sync/git-filter-repo ${{runner.temp}}/git-filter-repo

      - name: Confiugre git user
        run: |
          git config --global user.name "${BOT_USERNAME}"
          git config --global user.email "${BOT_EMAIL}"

      - name: Add git-filter-repo to PATH
        run: |
          echo "Adding git-filter-repo to PATH"
          echo '${{runner.temp}}' >> $GITHUB_PATH

      - name: Sync trezor-common repository
        env:
          BOT_TOKEN: ${{ steps.trezor-bot-token.outputs.token }}
        run: |
          echo "Synchronizing common with the trezor-common repository"
          git config --unset-all http.https://github.com/.extraheader
          ${{ runner.temp }}/common_repo_sync.sh