add ok-to-test

Author: adamint

.github/workflows/ci.yml

@@ -8,9 +8,11 @@ on:
     branches: [ main, dev ]
   pull_request:
     branches: [ main, dev ]
+  repository_dispatch:
+    types: [ok-to-test-command]
 
 jobs:
-  test_android_jvm_linux:
+  test_android_jvm_linux_trusted:
     runs-on: ubuntu-latest
     environment: testing
     env:
@@ -37,4 +39,37 @@ jobs:
       with:
         name: code-coverage-report
         path: build/reports
-      if: always()
+      if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository
+  test_android_jvm_linux_untrusted:
+    runs-on: ubuntu-latest
+    environment: testing
+    env:
+      SPOTIFY_CLIENT_ID: ${{ secrets.SPOTIFY_CLIENT_ID }}
+      SPOTIFY_CLIENT_SECRET: ${{ secrets.SPOTIFY_CLIENT_SECRET }}
+    steps:
+      - name: Fork based /ok-to-test checkout
+        uses: actions/checkout@v2
+        with:
+          ref: 'refs/pull/${{ github.event.client_payload.pull_request.number }}/merge'
+      - name: Install java 11
+        uses: actions/setup-java@v2
+        with:
+          distribution: 'adopt'
+          java-version: '11'
+      - name: Install curl
+        run: sudo apt-get install -y curl libcurl4-openssl-dev
+      - name: Test secret
+        run: echo "client id secret is $SPOTIFY_CLIENT_ID"
+      - name: Test android
+        run: ./gradlew testDebugUnitTest
+      - name: Test jvm
+        run: ./gradlew jvmTest
+      - name: Archive test results
+        uses: actions/upload-artifact@v2
+        with:
+          name: code-coverage-report
+          path: build/reports
+        if:
+          github.event_name == 'repository_dispatch' &&
+          github.event.client_payload.slash_command.sha != '' &&
+          contains(github.event.client_payload.pull_request.head.sha, github.event.client_payload.slash_command.sha)

.github/workflows/ok-to-test.yml

@@ -0,0 +1,33 @@
+# If someone with write access comments "/ok-to-test" on a pull request, emit a repository_dispatch event
+name: Ok To Test
+
+on:
+  issue_comment:
+    types: [created]
+
+jobs:
+  ok-to-test:
+    runs-on: ubuntu-latest
+    environment: testing
+    # Only run for PRs, not issue comments
+    if: ${{ github.event.issue.pull_request }}
+    steps:
+      - name: Generate token
+        id: generate_token
+        uses: tibdex/github-app-token@v1
+        with:
+          app_id: ${{ secrets.APP_ID }}
+          private_key: ${{ secrets.PRIVATE_KEY }}
+
+      - name: Slash Command Dispatch
+        uses: peter-evans/slash-command-dispatch@v1
+        env:
+          TOKEN: ${{ steps.generate_token.outputs.token }}
+        with:
+          token: ${{ env.TOKEN }} # GitHub App installation access token
+          # token: ${{ secrets.PERSONAL_ACCESS_TOKEN }} # PAT or OAuth token will also work
+          reaction-token: ${{ secrets.GITHUB_TOKEN }}
+          issue-type: pull-request
+          commands: ok-to-test
+          named-args: true
+          permission: write