Merge c4feb3d355 into 5c236bd4c0

2024-05-05 21:19:00 +08:00 · 2024-05-05 21:19:00 +08:00 · c6684ef8b1
parent 5c236bd4c0 c4feb3d355
commit c6684ef8b1
18 changed files with 604 additions and 14 deletions
--- a/models/actions/require_action.go
+++ b/models/actions/require_action.go
@ -0,0 +1,82 @@
+// Copyright 2024 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+// WIP RequireAction
+
+package actions
+
+import (
+	"context"
+
+	"code.gitea.io/gitea/models/db"
+	"code.gitea.io/gitea/modules/timeutil"
+
+	"xorm.io/builder"
+)
+
+type RequireAction struct {
+	ID           int64              `xorm:"pk autoincr"`
+	OrgID        int64              `xorm:"index"`
+	RepoName     string             `xorm:"VARCHAR(255)"`
+	WorkflowName string             `xorm:"VARCHAR(255) UNIQUE(require_action) NOT NULL"`
+	CreatedUnix  timeutil.TimeStamp `xorm:"created NOT NULL"`
+	UpdatedUnix  timeutil.TimeStamp `xorm:"updated"`
+}
+
+type GlobalWorkflow struct {
+	RepoName string
+	Filename string
+}
+
+func init() {
+	db.RegisterModel(new(RequireAction))
+}
+
+type FindRequireActionOptions struct {
+	db.ListOptions
+	RequireActionID int64
+	OrgID           int64
+	RepoName        string
+}
+
+func (opts FindRequireActionOptions) ToConds() builder.Cond {
+	cond := builder.NewCond()
+	if opts.OrgID > 0 {
+		cond = cond.And(builder.Eq{"org_id": opts.OrgID})
+	}
+	if opts.RequireActionID > 0 {
+		cond = cond.And(builder.Eq{"id": opts.RequireActionID})
+	}
+	if opts.RepoName != "" {
+		cond = cond.And(builder.Eq{"repo_name": opts.RepoName})
+	}
+	return cond
+}
+
+// LoadAttributes loads the attributes of the require action
+func (r *RequireAction) LoadAttributes(ctx context.Context) error {
+	// place holder for now.
+	return nil
+}
+
+// if the workflow is removable
+func (r *RequireAction) Removable(orgID int64) bool {
+	// everyone can remove for now
+	return r.OrgID == orgID
+}
+
+func AddRequireAction(ctx context.Context, orgID int64, repoName, workflowName string) (*RequireAction, error) {
+	ra := &RequireAction{
+		OrgID:        orgID,
+		RepoName:     repoName,
+		WorkflowName: workflowName,
+	}
+	return ra, db.Insert(ctx, ra)
+}
+
+func DeleteRequireAction(ctx context.Context, requireActionID int64) error {
+	if _, err := db.DeleteByID[RequireAction](ctx, requireActionID); err != nil {
+		return err
+	}
+	return nil
+}
--- a/models/migrations/v1_23/v295.go
+++ b/models/migrations/v1_23/v295.go
@ -0,0 +1,22 @@
+// Copyright 2023 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+package v1_23 //nolint
+
+import (
+	"code.gitea.io/gitea/modules/timeutil"
+
+	"xorm.io/xorm"
+)
+
+func AddRequireActionTable(x *xorm.Engine) error {
+	type RequireAction struct {
+		ID           int64              `xorm:"pk autoincr"`
+		OrgID        int64              `xorm:"index"`
+		RepoName     string             `xorm:"VARCHAR(255)"`
+		WorkflowName string             `xorm:"VARCHAR(255) UNIQUE(require_action) NOT NULL"`
+		CreatedUnix  timeutil.TimeStamp `xorm:"created NOT NULL"`
+		UpdatedUnix  timeutil.TimeStamp `xorm:"updated"`
+	}
+	return x.Sync(new(RequireAction))
+}
--- a/models/repo/repo_unit.go
+++ b/models/repo/repo_unit.go
@ -169,13 +169,30 @@ func (cfg *PullRequestsConfig) GetDefaultMergeStyle() MergeStyle {
 }

 type ActionsConfig struct {
-	DisabledWorkflows []string
+	DisabledWorkflows      []string
+	EnabledGlobalWorkflows []string
 }

 func (cfg *ActionsConfig) EnableWorkflow(file string) {
 	cfg.DisabledWorkflows = util.SliceRemoveAll(cfg.DisabledWorkflows, file)
 }

+func (cfg *ActionsConfig) DisableGlobalWorkflow(file string) {
+	cfg.EnabledGlobalWorkflows = util.SliceRemoveAll(cfg.EnabledGlobalWorkflows, file)
+}
+
+func (cfg *ActionsConfig) IsGlobalWorkflowEnabled(file string) bool {
+	return slices.Contains(cfg.EnabledGlobalWorkflows, file)
+}
+
+func (cfg *ActionsConfig) EnableGlobalWorkflow(file string) {
+	cfg.EnabledGlobalWorkflows = append(cfg.EnabledGlobalWorkflows, file)
+}
+
+func (cfg *ActionsConfig) GetGlobalWorkflow() []string {
+	return cfg.EnabledGlobalWorkflows
+}
+
 func (cfg *ActionsConfig) ToString() string {
 	return strings.Join(cfg.DisabledWorkflows, ",")
 }
--- a/options/locale/locale_en-US.ini
+++ b/options/locale/locale_en-US.ini
@ -3647,11 +3647,38 @@ runs.no_workflows.documentation = For more information on Gitea Actions, see <a
 runs.no_runs = The workflow has no runs yet.
 runs.empty_commit_message = (empty commit message)

+require_action = Require Actions
+require_action.require_action_manage_panel = Require Actions Management Panel
+require_action.enable_global_workflow = How to Enable Global Workflow
+require_action.id = ID
+require_action.add = Add Global Workflow
+require_action.add_require_action = Enable selected Workflow
+require_action.new = Create New
+require_action.status = Status
+require_action.search = Search...
+require_action.version = Version
+require_action.repo = Repo Name
+require_action.workflow = Workflow Filename
+require_action.link = Link
+require_action.remove = Remove
+require_action.none = No Require Actions Available.
+require_action.creation.failed = Create Global Require Action %s Failed.
+require_action.creation.success = Create Global Require Action %s successfully.
+require_action.deletion = Delete
+require_action.deletion.description = Removing the Global Require Action is permanent and cannot be undone. Continue?
+require_action.deletion.success = The Global Require Action has been removed.
+
 workflow.disable = Disable Workflow
 workflow.disable_success = Workflow '%s' disabled successfully.
 workflow.enable = Enable Workflow
 workflow.enable_success = Workflow '%s' enabled successfully.
 workflow.disabled = Workflow is disabled.
+workflow.global = Global
+workflow.global_disable = Disable Global Require
+workflow.global_disable_success = Global Require '%s' disabled successfully.
+workflow.global_enable = Enable Global Require
+workflow.global_enable_success = Global Require '%s' enabled successfully.
+workflow.global_enabled = Global Require is disabled.

 need_approval_desc = Need approval to run workflows for fork pull request.

--- a/routers/web/org/setting/require_action.go
+++ b/routers/web/org/setting/require_action.go
@ -0,0 +1,14 @@
+// Copyright 2024 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+// WIP RequireAction
+
+package setting
+
+import (
+	"code.gitea.io/gitea/services/context"
+)
+
+func RedirectToRepoSetting(ctx *context.Context) {
+	ctx.Redirect(ctx.Org.OrgLink + "/settings/actions/require_action")
+}
--- a/routers/web/repo/actions/actions.go
+++ b/routers/web/repo/actions/actions.go
@ -145,6 +145,7 @@ func List(ctx *context.Context) {
 	workflow := ctx.FormString("workflow")
 	actorID := ctx.FormInt64("actor")
 	status := ctx.FormInt("status")
+	isGlobal := false
 	ctx.Data["CurWorkflow"] = workflow

 	actionsConfig := ctx.Repo.Repository.MustGetUnit(ctx, unit.TypeActions).ActionsConfig()
@ -153,6 +154,8 @@ func List(ctx *context.Context) {
 	if len(workflow) > 0 && ctx.Repo.IsAdmin() {
 		ctx.Data["AllowDisableOrEnableWorkflow"] = true
 		ctx.Data["CurWorkflowDisabled"] = actionsConfig.IsWorkflowDisabled(workflow)
+		ctx.Data["CurGlobalWorkflowEnable"] = actionsConfig.IsGlobalWorkflowEnabled(workflow)
+		isGlobal = actionsConfig.IsGlobalWorkflowEnabled(workflow)
 	}

 	// if status or actor query param is not given to frontend href, (href="/<repoLink>/actions")
@ -209,6 +212,9 @@ func List(ctx *context.Context) {
 	pager.AddParamString("workflow", workflow)
 	pager.AddParamString("actor", fmt.Sprint(actorID))
 	pager.AddParamString("status", fmt.Sprint(status))
+	if isGlobal {
+		pager.AddParamString("global", fmt.Sprint(isGlobal))
+	}
 	ctx.Data["Page"] = pager
 	ctx.Data["HasWorkflowsOrRuns"] = len(workflows) > 0 || len(runs) > 0

--- a/routers/web/repo/actions/view.go
+++ b/routers/web/repo/actions/view.go
@ -685,33 +685,60 @@ func EnableWorkflowFile(ctx *context_module.Context) {
 }

 func disableOrEnableWorkflowFile(ctx *context_module.Context, isEnable bool) {
+	disableOrEnable(ctx, isEnable, false)
+}
+
+func disableOrEnable(ctx *context_module.Context, isEnable, isglobal bool) {
 	workflow := ctx.FormString("workflow")
 	if len(workflow) == 0 {
 		ctx.ServerError("workflow", nil)
 		return
 	}
-
 	cfgUnit := ctx.Repo.Repository.MustGetUnit(ctx, unit.TypeActions)
 	cfg := cfgUnit.ActionsConfig()
-
-	if isEnable {
-		cfg.EnableWorkflow(workflow)
+	if isglobal {
+		if isEnable {
+			cfg.DisableGlobalWorkflow(workflow)
+		} else {
+			cfg.EnableGlobalWorkflow(workflow)
+		}
 	} else {
-		cfg.DisableWorkflow(workflow)
+		if isEnable {
+			cfg.EnableWorkflow(workflow)
+		} else {
+			cfg.DisableWorkflow(workflow)
+		}
 	}
-
 	if err := repo_model.UpdateRepoUnit(ctx, cfgUnit); err != nil {
 		ctx.ServerError("UpdateRepoUnit", err)
 		return
 	}
-
-	if isEnable {
-		ctx.Flash.Success(ctx.Tr("actions.workflow.enable_success", workflow))
+	if isglobal {
+		if isEnable {
+			ctx.Flash.Success(ctx.Tr("actions.workflow.global_disable_success", workflow))
+		} else {
+			ctx.Flash.Success(ctx.Tr("actions.workflow.global_enable_success", workflow))
+		}
 	} else {
-		ctx.Flash.Success(ctx.Tr("actions.workflow.disable_success", workflow))
+		if isEnable {
+			ctx.Flash.Success(ctx.Tr("actions.workflow.enable_success", workflow))
+		} else {
+			ctx.Flash.Success(ctx.Tr("actions.workflow.disable_success", workflow))
+		}
 	}
-
 	redirectURL := fmt.Sprintf("%s/actions?workflow=%s&actor=%s&status=%s", ctx.Repo.RepoLink, url.QueryEscape(workflow),
 		url.QueryEscape(ctx.FormString("actor")), url.QueryEscape(ctx.FormString("status")))
 	ctx.JSONRedirect(redirectURL)
 }
+
+func DisableGlobalWorkflowFile(ctx *context_module.Context) {
+	disableOrEnableGlobalWorkflowFile(ctx, true)
+}
+
+func EnableGlobalWorkflowFile(ctx *context_module.Context) {
+	disableOrEnableGlobalWorkflowFile(ctx, false)
+}
+
+func disableOrEnableGlobalWorkflowFile(ctx *context_module.Context, isEnable bool) {
+	disableOrEnable(ctx, isEnable, true)
+}
--- a/routers/web/repo/setting/require_action.go
+++ b/routers/web/repo/setting/require_action.go
@ -0,0 +1,87 @@
+// Copyright 2024 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+// WIP RequireAction
+
+package setting
+
+import (
+	"errors"
+	"net/http"
+
+	actions_model "code.gitea.io/gitea/models/actions"
+	"code.gitea.io/gitea/models/db"
+	"code.gitea.io/gitea/modules/base"
+	shared "code.gitea.io/gitea/routers/web/shared/actions"
+	"code.gitea.io/gitea/services/context"
+)
+
+const (
+	// let start with org WIP
+	tplOrgRequireAction base.TplName = "org/settings/actions"
+)
+
+type requireActionsCtx struct {
+	OrgID                 int64
+	IsOrg                 bool
+	RequireActionTemplate base.TplName
+	RedirectLink          string
+}
+
+func getRequireActionCtx(ctx *context.Context) (*requireActionsCtx, error) {
+	if ctx.Data["PageIsOrgSettings"] == true {
+		return &requireActionsCtx{
+			OrgID:                 ctx.Org.Organization.ID,
+			IsOrg:                 true,
+			RequireActionTemplate: tplOrgRequireAction,
+			RedirectLink:          ctx.Org.OrgLink + "/settings/actions/require_action",
+		}, nil
+	}
+	return nil, errors.New("unable to set Require Actions context")
+}
+
+// Listing all RequireAction
+func RequireAction(ctx *context.Context) {
+	ctx.Data["ActionsTitle"] = ctx.Tr("actions.requires")
+	ctx.Data["PageType"] = "require_action"
+	ctx.Data["PageIsSharedSettingsRequireAction"] = true
+
+	vCtx, err := getRequireActionCtx(ctx)
+	if err != nil {
+		ctx.ServerError("getRequireActionCtx", err)
+		return
+	}
+
+	page := ctx.FormInt("page")
+	if page <= 1 {
+		page = 1
+	}
+	opts := actions_model.FindRequireActionOptions{
+		ListOptions: db.ListOptions{
+			Page:     page,
+			PageSize: 10,
+		},
+	}
+	shared.SetRequireActionContext(ctx, opts)
+	ctx.Data["Link"] = vCtx.RedirectLink
+	shared.GlobalEnableWorkflow(ctx, ctx.Org.Organization.ID)
+	ctx.HTML(http.StatusOK, vCtx.RequireActionTemplate)
+}
+
+func RequireActionCreate(ctx *context.Context) {
+	vCtx, err := getRequireActionCtx(ctx)
+	if err != nil {
+		ctx.ServerError("getRequireActionCtx", err)
+		return
+	}
+	shared.CreateRequireAction(ctx, vCtx.OrgID, vCtx.RedirectLink)
+}
+
+func RequireActionDelete(ctx *context.Context) {
+	vCtx, err := getRequireActionCtx(ctx)
+	if err != nil {
+		ctx.ServerError("getRequireActionCtx", err)
+		return
+	}
+	shared.DeleteRequireAction(ctx, vCtx.RedirectLink)
+}
--- a/routers/web/shared/actions/require_action.go
+++ b/routers/web/shared/actions/require_action.go
@ -0,0 +1,84 @@
+// Copyright 2024 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+// WIP RequireAction
+
+package actions
+
+import (
+	actions_model "code.gitea.io/gitea/models/actions"
+	"code.gitea.io/gitea/models/db"
+	org_model "code.gitea.io/gitea/models/organization"
+	"code.gitea.io/gitea/models/unit"
+	"code.gitea.io/gitea/modules/log"
+	"code.gitea.io/gitea/modules/web"
+	actions_service "code.gitea.io/gitea/services/actions"
+	"code.gitea.io/gitea/services/context"
+	"code.gitea.io/gitea/services/forms"
+)
+
+// SetRequireActionDeletePost response for deleting a require action workflow
+func SetRequireActionContext(ctx *context.Context, opts actions_model.FindRequireActionOptions) {
+	requireActions, count, err := db.FindAndCount[actions_model.RequireAction](ctx, opts)
+	if err != nil {
+		ctx.ServerError("CountRequireActions", err)
+		return
+	}
+	ctx.Data["RequireActions"] = requireActions
+	ctx.Data["Total"] = count
+	ctx.Data["OrgID"] = ctx.Org.Organization.ID
+	ctx.Data["OrgName"] = ctx.Org.Organization.Name
+	pager := context.NewPagination(int(count), opts.PageSize, opts.Page, 5)
+	ctx.Data["Page"] = pager
+}
+
+// get all the available enable global workflow in the org's repo
+func GlobalEnableWorkflow(ctx *context.Context, orgID int64) {
+	var gwfList []actions_model.GlobalWorkflow
+	orgRepos, err := org_model.GetOrgRepositories(ctx, orgID)
+	if err != nil {
+		ctx.ServerError("GlobalEnableWorkflows get org repos: ", err)
+		return
+	}
+	for _, repo := range orgRepos {
+		err := repo.LoadUnits(ctx)
+		if err != nil {
+			ctx.ServerError("GlobalEnableWorkflows LoadUnits : ", err)
+		}
+		actionsConfig := repo.MustGetUnit(ctx, unit.TypeActions).ActionsConfig()
+		enabledWorkflows := actionsConfig.GetGlobalWorkflow()
+		for _, workflow := range enabledWorkflows {
+			gwf := actions_model.GlobalWorkflow{
+				RepoName: repo.Name,
+				Filename: workflow,
+			}
+			gwfList = append(gwfList, gwf)
+		}
+	}
+	ctx.Data["GlobalEnableWorkflows"] = gwfList
+}
+
+func CreateRequireAction(ctx *context.Context, orgID int64, redirectURL string) {
+	ctx.Data["OrgID"] = ctx.Org.Organization.ID
+	form := web.GetForm(ctx).(*forms.RequireActionForm)
+	v, err := actions_service.CreateRequireAction(ctx, orgID, form.RepoName, form.WorkflowName)
+	if err != nil {
+		log.Error("CreateRequireAction: %v", err)
+		ctx.JSONError(ctx.Tr("actions.require_action.creation.failed"))
+		return
+	}
+	ctx.Flash.Success(ctx.Tr("actions.require_action.creation.success", v.WorkflowName))
+	ctx.JSONRedirect(redirectURL)
+}
+
+func DeleteRequireAction(ctx *context.Context, redirectURL string) {
+	id := ctx.ParamsInt64(":require_action_id")
+
+	if err := actions_service.DeleteRequireActionByID(ctx, id); err != nil {
+		log.Error("Delete RequireAction [%d] failed: %v", id, err)
+		ctx.JSONError(ctx.Tr("actions.require_action.deletion.failed"))
+		return
+	}
+	ctx.Flash.Success(ctx.Tr("actions.require_action.deletion.success"))
+	ctx.JSONRedirect(redirectURL)
+}
--- a/routers/web/web.go
+++ b/routers/web/web.go
@ -457,6 +457,15 @@ func registerRoutes(m *web.Route) {
 		})
 	}

+	// WIP RequireAction
+	addSettingsRequireActionRoutes := func() {
+		m.Group("/require_action", func() {
+			m.Get("", repo_setting.RequireAction)
+			m.Post("/add", web.Bind(forms.RequireActionForm{}), repo_setting.RequireActionCreate)
+			m.Post("/{require_action_id}/delete", repo_setting.RequireActionDelete)
+		})
+	}
+
 	// FIXME: not all routes need go through same middleware.
 	// Especially some AJAX requests, we can reduce middleware number to improve performance.

@ -628,6 +637,7 @@ func registerRoutes(m *web.Route) {

 		m.Group("/actions", func() {
 			m.Get("", user_setting.RedirectToDefaultSetting)
+			addSettingsRequireActionRoutes()
 			addSettingsRunnersRoutes()
 			addSettingsSecretsRoutes()
 			addSettingsVariablesRoutes()
@ -926,6 +936,7 @@ func registerRoutes(m *web.Route) {

 				m.Group("/actions", func() {
 					m.Get("", org_setting.RedirectToDefaultSetting)
+					addSettingsRequireActionRoutes()
 					addSettingsRunnersRoutes()
 					addSettingsSecretsRoutes()
 					addSettingsVariablesRoutes()
@ -1371,10 +1382,12 @@ func registerRoutes(m *web.Route) {
 	}, ignSignIn, context.RepoAssignment, reqRepoProjectsReader, repo.MustEnableRepoProjects)
 	// end "/{username}/{reponame}/projects"

-	m.Group("/{username}/{reponame}/actions", func() {
+	m.Group("/actions", func() {
 		m.Get("", actions.List)
 		m.Post("/disable", reqRepoAdmin, actions.DisableWorkflowFile)
 		m.Post("/enable", reqRepoAdmin, actions.EnableWorkflowFile)
+		m.Post("/global_disable", reqRepoAdmin, actions.DisableGlobalWorkflowFile)
+		m.Post("/global_enable", reqRepoAdmin, actions.EnableGlobalWorkflowFile)

 		m.Group("/runs/{run}", func() {
 			m.Combo("").
--- a/services/actions/require_action.go
+++ b/services/actions/require_action.go
@ -0,0 +1,22 @@
+// Copyright 2024 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+package actions
+
+import (
+	"context"
+
+	actions_model "code.gitea.io/gitea/models/actions"
+)
+
+func CreateRequireAction(ctx context.Context, orgID int64, repoName, workflowName string) (*actions_model.RequireAction, error) {
+	v, err := actions_model.AddRequireAction(ctx, orgID, repoName, workflowName)
+	if err != nil {
+		return nil, err
+	}
+	return v, nil
+}
+
+func DeleteRequireActionByID(ctx context.Context, requireActionID int64) error {
+	return actions_model.DeleteRequireAction(ctx, requireActionID)
+}
--- a/services/forms/user_form.go
+++ b/services/forms/user_form.go
@ -344,6 +344,12 @@ func (f *EditVariableForm) Validate(req *http.Request, errs binding.Errors) bind
 	return middleware.Validate(errs, ctx.Data, f, ctx.Locale)
 }

+// WIP RequireAction create form
+type RequireActionForm struct {
+	RepoName     string `binding:"Required;MaxSize(255)"`
+	WorkflowName string `binding:"Required;MaxSize(255)"`
+}
+
 // NewAccessTokenForm form for creating access token
 type NewAccessTokenForm struct {
 	Name  string `binding:"Required;MaxSize(255)" locale:"settings.token_name"`
--- a/templates/org/settings/actions.tmpl
+++ b/templates/org/settings/actions.tmpl
@ -1,6 +1,8 @@
 {{template "org/settings/layout_head" (dict "ctxData" . "pageClass" "organization settings actions")}}
 	<div class="org-setting-content">
-	{{if eq .PageType "runners"}}
+	{{if eq .PageType "require_action"}}
+		{{template "shared/actions/require_action_list" .}}
+	{{else if eq .PageType "runners"}}
 		{{template "shared/actions/runner_list" .}}
 	{{else if eq .PageType "secrets"}}
 		{{template "shared/secrets/add_list" .}}
--- a/templates/org/settings/navbar.tmpl
+++ b/templates/org/settings/navbar.tmpl
@ -29,6 +29,9 @@
 		<details class="item toggleable-item" {{if or .PageIsSharedSettingsRunners .PageIsSharedSettingsSecrets .PageIsSharedSettingsVariables}}open{{end}}>
 			<summary>{{ctx.Locale.Tr "actions.actions"}}</summary>
 			<div class="menu">
+				<a class="{{if .PageIsSharedSettingsRequireAction}}active {{end}}item" href="{{.OrgLink}}/settings/actions/require_action">
+					{{ctx.Locale.Tr "actions.require_action"}}
+				</a>
 				<a class="{{if .PageIsSharedSettingsRunners}}active {{end}}item" href="{{.OrgLink}}/settings/actions/runners">
 					{{ctx.Locale.Tr "actions.runners"}}
 				</a>
--- a/templates/repo/actions/list.tmpl
+++ b/templates/repo/actions/list.tmpl
@ -20,6 +20,9 @@
 							{{if $.ActionsConfig.IsWorkflowDisabled .Entry.Name}}
 								<div class="ui red label">{{ctx.Locale.Tr "disabled"}}</div>
 							{{end}}
+							{{if $.ActionsConfig.IsGlobalWorkflowEnabled .Entry.Name}}
+								<div class="ui red label">{{ctx.Locale.Tr "Global Enabled"}}</div>
+							{{end}}
 						</a>
 					{{end}}
 				</div>
@ -65,6 +68,10 @@
 						</div>
 					</div>

+					<!-- IsGlobalWorkflowEnabled -->
+					<div class="ui dropdown jump item">
+						<span class="text">{{ctx.Locale.Tr "actions.workflow.global"}}</span>
+					</div>
 					{{if .AllowDisableOrEnableWorkflow}}
 						<button class="ui jump dropdown btn interact-bg tw-p-2">
 							{{svg "octicon-kebab-horizontal"}}
@ -72,6 +79,9 @@
 								<a class="item link-action" data-url="{{$.Link}}/{{if .CurWorkflowDisabled}}enable{{else}}disable{{end}}?workflow={{$.CurWorkflow}}&actor={{.CurActor}}&status={{$.CurStatus}}">
 									{{if .CurWorkflowDisabled}}{{ctx.Locale.Tr "actions.workflow.enable"}}{{else}}{{ctx.Locale.Tr "actions.workflow.disable"}}{{end}}
 								</a>
+								<a class="item link-action" data-url="{{$.Link}}/{{if .CurGlobalWorkflowEnable}}global_disable{{else}}global_enable{{end}}?workflow={{$.CurWorkflow}}&actor={{.CurActor}}&status={{$.CurStatus}}">
+									{{if .CurGlobalWorkflowEnable}}{{ctx.Locale.Tr "actions.workflow.global_disable"}}{{else}}{{ctx.Locale.Tr "actions.workflow.global_enable"}}{{end}}
+								</a>
 							</div>
 						</button>
 					{{end}}
--- a/templates/shared/actions/require_action_list.tmpl
+++ b/templates/shared/actions/require_action_list.tmpl
@ -0,0 +1,147 @@
+<div class="require-actions-container">
+	<h4 class="ui top attached header">
+	{{ctx.Locale.Tr "actions.require_action.require_action_manage_panel"}} ({{ctx.Locale.Tr "admin.total" .Total}})
+	<div class="ui right">
+		<div class="ui top right">
+			<button class="ui primary tiny button show-modal"
+					data-modal="#add-require-actions-modal"
+					data-modal-form.action="{{.Link}}/add"
+					data-modal-header="{{ctx.Locale.Tr "actions.require_action.add"}}">
+					{{ctx.Locale.Tr "actions.require_action.add"}}
+			</button>
+		</div>
+	</div>
+	</h4>
+	<div class="ui attached segment">
+		<form class="ui form ignore-dirty" id="require-action-list-search-form" action="{{$.Link}}">
+			<!-- Search Text -->
+				{{template "shared/search/combo" dict "Value" .Keyword}}
+				<button class="ui primary button">{{ctx.Locale.Tr "actions.require_action.search"}}</button>
+		</form>
+	</div>
+	<div class="ui attached table segment">
+		<table class="ui very basic striped table unstackable">
+			<thead>
+				<tr>
+					<th data-sortt-asc="newest" data-sortt-desc="oldest">
+						{{ctx.Locale.Tr "actions.require_action.id"}}
+					</th>
+					<th data-sortt-asc="alphabetically" data-sortt-desc="reversealphabetically">
+						{{ctx.Locale.Tr "actions.require_action.workflow"}}
+					</th>
+					<th>{{ctx.Locale.Tr "actions.require_action.repo"}}</th>
+					<th>{{ctx.Locale.Tr "actions.require_action.link"}}</th>
+					<th>{{ctx.Locale.Tr "actions.require_action.remove"}}</th>
+				</tr>
+			</thead>
+			<tbody>
+				{{if .RequireActions}}
+					{{range .RequireActions}}
+					<tr>
+						<td>{{.ID}}</td>
+						<td><p data-tooltip-content="{{.RepoName}}">{{.WorkflowName}}</p></td>
+						<td>{{.RepoName}}</td>
+						<td><a href="/{{$.OrgName}}/{{.RepoName}}">Workflow Link</a></td>
+						<td class="require_action-ops">
+							{{if .Removable $.OrgID}}
+							<button class="btn interact-bg tw-p-2 link-action"
+								data-tooltip-content="{{ctx.Locale.Tr "actions.require_action.deletion"}}"
+								data-url="{{$.Link}}/{{.ID}}/delete"
+								data-modal-confirm="{{ctx.Locale.Tr "actions.require_action.deletion.description"}}"
+							>
+								{{svg "octicon-trash"}}
+							</button>
+							<!-- <a href="{{$.Link}}/{{.ID}}/delete">{{svg "octicon-x-circle-fill"}}</a>-->
+							{{end}}
+						</td>
+					</tr>
+					{{end}}
+				{{else}}
+					<tr>
+						<td class="center aligned" colspan="8">{{ctx.Locale.Tr "actions.require_action.none"}}</td>
+					</tr>
+				{{end}}
+			</tbody>
+		</table>
+	</div>
+	{{template "base/paginate"}}
+</div>
+
+
+
+{{/* Add RequireAction dialog */}}
+<div class="ui small modal" id="add-require-actions-modal">
+	<div class="header">
+		<span id="actions-modal-header">Enable Workflows</span>
+	</div>
+	<form class="ui form form-fetch-action" method="post">
+		<div class="content">
+			<div class="item">
+				<a href="https://docs.gitea.com/usage/actions/require-action">{{ctx.Locale.Tr "actions.require_action.enable_global_workflow"}}</a>
+			</div>
+			<div class="divider"></div>
+			<table class="ui very basic striped table unstackable">
+			<thead>
+				<tr>
+					<th data-sortt-asc="alphabetically" data-sortt-desc="reversealphabetically">
+						{{ctx.Locale.Tr "actions.require_action.workflow"}}
+					</th>
+					<th>
+						{{ctx.Locale.Tr "actions.require_action.repo"}}
+					</th>
+				</tr>
+			</thead>
+			<tbody>
+			{{if .GlobalEnableWorkflows}}
+				{{range .GlobalEnableWorkflows}}
+				<tr>
+				<td><div class="field">
+					<div class="ui radio checkbox">
+						<input class="select-org-radio" name="workflow_name" type="radio" value="{{.Filename}}">
+						<label>{{.Filename}}</label>
+					</div>
+					<input name="repo_name" type="hidden" value="{{.RepoName}}">
+				</div></td>
+				<td><div class="field">
+					<a href="/{{$.OrgName}}/{{.RepoName}}">
+						<label>{{.RepoName}}</label>
+					</a>
+				</div></td>
+				</tr>
+				{{end}}
+			{{else}}
+					<tr>
+						<td class="center aligned" colspan="8">{{ctx.Locale.Tr "actions.require_action.none"}}</td>
+					</tr>
+			{{end}}
+			</tbody>
+			</table>
+			<div class="divider"></div>
+			<div class="item">
+				<a href="{{$.Link}}/add">{{ctx.Locale.Tr "actions.require_action.add_require_action"}}</a>
+			</div>
+		</div>
+		{{template "base/modal_actions_confirm" (dict "ModalButtonTypes" "confirm")}}
+	</form>
+</div>
+<!--
+<script>
+	window.addEventListener('DOMContentLoaded', function() {
+		var checkboxes = document.querySelectorAll('.ui.radio.checkbox');
+		checkboxes.forEach(function(checkbox) {
+			checkbox.addEventListener('change', function() {
+				var hiddenInput = this.nextElementSibling;
+				var isChecked = this.querySelector('input[type="radio"]').checked;
+				hiddenInput.disabled = !isChecked;
+				// Disable other hidden inputs
+				checkboxes.forEach(function(otherCheckbox) {
+					var otherHiddenInput = otherCheckbox.nextElementSibling;
+					if (otherCheckbox !== checkbox) {
+						otherHiddenInput.disabled = isChecked;
+					}
+				});
+			});
+		});
+	});
+</script>
+-->
--- a/web_src/js/features/require-actions-select.js
+++ b/web_src/js/features/require-actions-select.js
@ -0,0 +1,19 @@
+export function initRequireActionsSelect() {
+  const raselect = document.getElementById('add-require-actions-modal');
+  if (!raselect) return;
+  const checkboxes = document.querySelectorAll('.ui.radio.checkbox');
+  for (const box of checkboxes) {
+    box.addEventListener('change', function() {
+      const hiddenInput = this.nextElementSibling;
+      const isChecked = this.querySelector('input[type="radio"]').checked;
+      hiddenInput.disabled = !isChecked;
+      // Disable other hidden inputs
+      for (const otherbox of checkboxes) {
+        const otherHiddenInput = otherbox.nextElementSibling;
+        if (otherbox !== box) {
+          otherHiddenInput.disabled = isChecked;
+        }
+      }
+    });
+  }
+}
--- a/web_src/js/index.js
+++ b/web_src/js/index.js
@ -54,6 +54,7 @@ import {initRepoCodeView} from './features/repo-code.js';
 import {initSshKeyFormParser} from './features/sshkey-helper.js';
 import {initUserSettings} from './features/user-settings.js';
 import {initRepoArchiveLinks} from './features/repo-common.js';
+import {initRequireActionsSelect} from './features/require-actions-select.js';
 import {initRepoMigrationStatusChecker} from './features/repo-migrate.js';
 import {
  initRepoSettingGitHook,
@ -143,6 +144,7 @@ onDomReady(() => {

  initRepoActivityTopAuthorsChart();
  initRepoArchiveLinks();
+  initRequireActionsSelect();
  initRepoBranchButton();
  initRepoCodeView();
  initRepoCommentForm();