WIP: Merge-Gate

.github/workflows/checks.yml

@@ -89,7 +89,7 @@ jobs:
       - name: Run type-check
         run: poetry run nox -s type-check
 
-  security-job:
+  security:
     name: Security Checking (Python-${{ matrix.python-version }})
     needs: [ version-check-job ]
     runs-on: ubuntu-latest
@@ -117,9 +117,9 @@ jobs:
           path: .security.json
           include-hidden-files: true
 
-  tests-job:
+  tests:
     name: Tests (Python-${{ matrix.python-version }}, Exasol-${{ matrix.exasol-version}})
-    needs: [ build-documentation-job, lint-job, type-check-job ]
+    needs: [ build-documentation-job, lint-job, type-check-job, security]
     runs-on: ubuntu-latest
     env:
       GITHUB_TOKEN: ${{ secrets.ALTERNATIVE_GITHUB_TOKEN ||  secrets.GITHUB_TOKEN }}

.github/workflows/ci.yml

@@ -14,9 +14,10 @@ on:
     - cron: "0 0 1/7 * *"
 
 jobs:
-  ci-job:
-    uses: ./.github/workflows/checks.yml
+
+  CI:
+    uses: ./.github/workflows/merge-gate.yml
 
   metrics:
-    needs: [ ci-job ]
+    needs: [ CI ]
     uses: ./.github/workflows/report.yml

.github/workflows/merge-gate.yml

@@ -0,0 +1,35 @@
+name: Merge-Gate
+
+on:
+  workflow_call:
+    secrets:
+      ALTERNATIVE_GITHUB_TOKEN:
+        required: false
+
+jobs:
+
+  ci-gate:
+    name: Fast
+    uses: ./.github/workflows/checks.yml
+
+  # This is an example of a saas-gate e.g. slow tests
+  saas-gate:
+    name: Slow
+    runs-on: ubuntu-latest
+    environment: manual-trigger
+    steps:
+      - name: Slow Tests
+        run: |
+          echo "Approved (Note: This is a dummy)"
+
+
+  approve-merge:
+    name: Mergeable 
+    runs-on: ubuntu-latest
+    needs: [ ci-gate, saas-gate ]
+
+    # Dummy step, 
+    steps:
+      - name: Approve 
+        run: |
+          echo "Merge Approved"