mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
5f918199ab
GitHub queues runs blocked by the concurrency group in order rather than cancelling the older one, so every cron restart added a link that waited its turn behind the chain and the queue grew by about five a day. A link that starts and finds another already waiting now steps aside.
45 lines
1.7 KiB
YAML
45 lines
1.7 KiB
YAML
name: Pacemaker
|
|
|
|
# GitHub's cron scheduler creates this repository's scheduled runs four to
|
|
# five hours late and drops the slots in between, so the hourly refresh cannot
|
|
# come from a cron. A workflow_dispatch call creates a run within seconds, so
|
|
# each pacemaker run sleeps until the next :05, fires the Hot CVEs refresh and
|
|
# its own successor, and the chain keeps time by itself. The cron below only
|
|
# restarts the chain if a link ever fails. While the chain is alive the
|
|
# concurrency group queues the extra run behind the running link, and a link
|
|
# that starts and finds another still waiting steps aside, so the queue never
|
|
# holds more than one.
|
|
on:
|
|
workflow_dispatch:
|
|
schedule:
|
|
- cron: '7 * * * *'
|
|
|
|
permissions:
|
|
actions: write
|
|
|
|
concurrency:
|
|
group: pacemaker
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
tick:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 70
|
|
steps:
|
|
- name: Sleep until the next :05, then fire the hourly refresh
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
run: |
|
|
waiting=$(gh run list -R "$GITHUB_REPOSITORY" --workflow pacemaker.yml --status pending --json databaseId --jq 'length')
|
|
if [ "${waiting:-0}" -gt 0 ]; then
|
|
echo "Another link is already waiting its turn; stepping aside"
|
|
exit 0
|
|
fi
|
|
now=$(date -u +%s)
|
|
next=$(( now / 3600 * 3600 + 300 ))
|
|
[ "$next" -gt "$now" ] || next=$(( next + 3600 ))
|
|
echo "Sleeping $(( (next - now) / 60 )) minutes until $(date -u -d @"$next" +%H:%M) UTC"
|
|
sleep $(( next - now ))
|
|
gh workflow run hot_cves.yml -R "$GITHUB_REPOSITORY" --ref main
|
|
gh workflow run pacemaker.yml -R "$GITHUB_REPOSITORY" --ref main
|