From e3a1482e3e9d794c59ea7be89a33ba181f58f83e Mon Sep 17 00:00:00 2001
From: Vince Grassia <593223+vgrassia@users.noreply.github.com>
Date: Wed, 13 Oct 2021 15:50:40 -0400
Subject: [PATCH] Add Slack alerts for Build workflow failures (#1633)

---
 .github/workflows/build.yml | 53 +++++++++++++++++++++++++++++++++++++
 1 file changed, 53 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 84f39e8288..0ac2f9541a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -408,3 +408,56 @@ jobs:
           name: swagger.json
           path: ./swagger.json
           if-no-files-found: error
+
+  check-failures:
+    name: Check for failures
+    if: always()
+    runs-on: ubuntu-20.04
+    needs:
+      - cloc
+      - testing
+      - build-artifacts
+      - build-docker
+      - upload
+    steps:
+      - name: Check if any job failed
+        env:
+          CLOC_STATUS: ${{ needs.cloc.result }}
+          TESTING_STATUS: ${{ needs.testing.result }}
+          BUILD_ARTIFACTS_STATUS: ${{ needs.build-artifacts.result }}
+          BUILD_DOCKER_STATUS: ${{ needs.build-docker.result }}
+          UPLOAD_STATUS: ${{ needs.upload.result }}
+        run: |
+          if [ "$CLOC_STATUS" = "failure" ]; then
+              exit 1
+          elif [ "$TESTING_STATUS" = "failure" ]; then
+              exit 1
+          elif [ "$BUILD_ARTIFACTS_STATUS" = "failure" ]; then
+              exit 1
+          elif [ "$BUILD_DOCKER_STATUS" = "failure" ]; then
+              exit 1
+          elif [ "$UPLOAD_STATUS" = "failure" ]; then
+              exit 1
+          fi
+
+      - name: Login to Azure - Prod Subscription
+        uses: Azure/login@77f1b2e3fb80c0e8645114159d17008b8a2e475a
+        if: failure()
+        with:
+          creds: ${{ secrets.AZURE_PROD_KV_CREDENTIALS }}
+
+      - name: Retrieve secrets
+        id: retrieve-secrets
+        uses: Azure/get-keyvault-secrets@80ccd3fafe5662407cc2e55f202ee34bfff8c403
+        if: failure()
+        with:
+          keyvault: "bitwarden-prod-kv"
+          secrets: "devops-alerts-slack-webhook-url"
+
+      - name: Notify Slack on failure
+        uses: act10ns/slack@e4e71685b9b239384b0f676a63c32367f59c2522  # v1.2.2
+        if: failure()
+        env:
+          SLACK_WEBHOOK_URL: ${{ steps.retrieve-secrets.outputs.devops-alerts-slack-webhook-url }}
+        with:
+          status: ${{ job.status }}