CI: running deployments only if test for the same GitHub SHA has passed

[akauppi]

Reduces complexity by keeping test-running and deployment separate, yet still guarantees tests get run before deployment.

1. test CI tasks shall write the SHA somewhere, if the tests pass
2. deployment tasks check it, and immediately fail if not found

For manual excercising (development of CI), one can fake by providing an SHA that exists in the cache. ;)

---

Details

Storage can be anything persistent, within the ci-builder account (store also project name).

Cloud Storage

[akauppi]

Tangential thought:

• GitHub Actions can prevent a merge

Make an Action that checks, whether the tests have passed for the particular commit SHA. Allow merge only then.

Implications to deploy scripts:

• They wouldn't need to make any such check.

[akauppi]

Implemented in 963790c

GitHub Actions left out.