Overview

The Sphinx domain ghactions documents GitHub Actions workflows - above all reusable workflows, whose inputs, outputs and secrets are the interface a caller uses. What the workflow file states - an input’s type, whether it is required, its default - is read from the file with pyTooling.GitHub.WorkflowFile, so a page doesn’t copy it and can’t drift from it. What the file can’t say stays hand-written, as the content of a directive.

The domain is the Sphinx extension pyTooling.GitHub.Sphinx. It builds on pyTooling.Sphinx, which it sets up itself, and is installed with the extra sphinx: pyTooling.GitHub[sphinx].

# doc/conf.py
extensions = [
  ...,
  "pyTooling.GitHub.Sphinx",
]

The domain’s directives are described on three pages:

Workflows and Parameters

→ ghactions:workflow and the entries of its inputs, outputs and secrets, and the roles referring to them.

Summaries

→ Tables, the interface, the dependencies and YAML excerpts of a workflow.

Pipeline Graph

→ ghactions:pipeline-graph draws a workflow’s jobs and their needs.

Configuration

# doc/conf.py
ghactions_repository =         "pyTooling/Actions"      # the documented repository
ghactions_workflow_directory = "../.github/workflows"   # relative to the Sphinx source directory
ghactions_ref =                "r8"                     # the ref the documentation describes

ghactions_workflow_directory

The directory holding the workflow files, relative to the Sphinx source directory. A ghactions:workflow without :file: reads <name>.yml from it. Default: None.

ghactions_repository

The documented repository, as owner/repo. A job calling owner/repo/.github/workflows/X.yml@<ref> is resolved to X.yml in ghactions_workflow_directory, whatever the ref. Default: None.

ghactions_ref

The ref - a branch or tag - of the documented repository the documentation describes, as r8. A job calling a workflow of the documented repository at another ref is a warning. None checks nothing. Default: None.

ghactions_server

The URL of the GitHub server the links of ghactions:yaml, ghactions:interface and ghactions:dependencies point to: https://github.com, or a GitHub Enterprise Server’s, as https://github.example.com. Default: "https://github.com".

ghactions_label_prefix

The root of the :ref: labels the directives register besides their targets - see Labels of Existing Pages. None registers none. Default: "JOBTMPL".

Labels of Existing Pages

Besides its target, each directive registers the :ref: label a page would have declared by hand, so existing references keep working when a page is converted - ghactions_label_prefix is their root:

JOBTMPL/Parameters                          .. ghactions:workflow:: Parameters
JOBTMPL/Parameters/Input/package_name       .. ghactions:input:: package_name
JOBTMPL/Parameters/Output/python_jobs       .. ghactions:output:: python_jobs
JOBTMPL/PublishOnPyPI/Secret/PYPI_TOKEN     .. ghactions:secret:: PYPI_TOKEN

A parameter’s section carries the anchor of its label, and the anchor docutils derives from its title, so a link into the hand-written page lands on the same entry. A label still declared by hand next to the directive is a duplicate.

Warnings

The page and the workflow file are compared while the page is read. A difference is a warning of type ghactions.drift, so -W fails the build, and suppress_warnings = ["ghactions.drift"] silences it. Where the problem is in the file, the warning names the place in the file, as Package.yml:8.

• An input is required and has a default, which is never used - named in the workflow file.

• A ghactions:input, ghactions:output or ghactions:secret names a parameter the workflow doesn’t have.

• A hand-written Type, Required or Default Value of an input or a secret repeats a fact of the workflow file. It is not shown; the file’s value is.

• An input has no entry in the document - neither a ghactions:input nor a ghactions:autoinputs - reported at the ghactions:workflow when the whole document was read.

• A ghactions:yaml names a job the workflow doesn’t have, or a section the workflow has nothing in.

A workflow file that can’t be found or read is a warning of type ghactions.workflow, as is a ghactions:input or a summary directive without a preceding ghactions:workflow.

Extending the Domain

A directive of another module reaches the domain with self.env.get_domain("ghactions"), a GitHubActionsDomain:

• GetCurrentWorkflow() returns the model of the document’s current workflow, a pyTooling.GitHub.WorkflowFile.Workflow;

• Resolver reads the workflows a job calls, every file once;

• ResolveWorkflow() says where a workflow is documented;

• ParameterDirective.CreateEntry creates a parameter’s entry and registers it, as ghactions:autoinputs does.

A directive is added to the domain with Sphinx.add_directive_to_domain.