name: Build Botocore
on:
  pull_request:
    types: [opened, synchronize, ready_for_review]
    branches: [develop]

concurrency:
  group: start-pull-request-build-${{ github.ref }}
  cancel-in-progress: true

env:
  DOWNLOAD_FOLDER: '.build-scripts/'
  SCRIPT_LOCATION: 'workflows/start-pull-request-build/pull-request-build-v1.sh'
  IAM_ROLE_ARN: 'arn:aws:iam::066695136813:role/BotocoreGitHubRole'
  ROLE_SESSION_DURATION_SECONDS: 7200

jobs:
  aws-sdk-pr-build:
    # Skip draft PRs and PRs from forked repos (they don't have access)
    if: github.event.pull_request.draft == false && github.event.pull_request.head.repo.full_name == github.repository
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      issues: write
      pull-requests: write
      contents: read
    steps:
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b
        with:
          role-to-assume: ${{ env.IAM_ROLE_ARN }}
          role-session-name: PullRequestBuildGitHubAction
          role-duration-seconds: ${{ env.ROLE_SESSION_DURATION_SECONDS }}
          aws-region: us-west-2
      - name: Download Build Script
        run: |
          aws s3 cp s3://aws-sdk-builds-github-assets-prod-us-west-2/$SCRIPT_LOCATION ./$DOWNLOAD_FOLDER/$SCRIPT_LOCATION --no-progress
          chmod +x ./$DOWNLOAD_FOLDER/$SCRIPT_LOCATION
      - name: Build
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          REPO: ${{ github.repository }}
          HEAD_REF: ${{ github.event.pull_request.head.ref }}
          PR_NUMBER: ${{ github.event.pull_request.number }}
          RUN_ID: ${{ github.run_id }}
        run: |
          ./$DOWNLOAD_FOLDER/$SCRIPT_LOCATION \
            --repo "$REPO" \
            --branch "$HEAD_REF" \
            --pr-number "$PR_NUMBER" \
            --run-id "$RUN_ID"
        timeout-minutes: 120