fix(sbom): Fixes for Programming Language Vulnerabilities and SBOM Package Maintainer Details #12413
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Test | |
on: | |
pull_request: | |
paths-ignore: | |
- '**.md' | |
- 'docs/**' | |
- 'mkdocs.yml' | |
- 'LICENSE' | |
- '.release-please-manifest.json' ## don't run tests for release-please PRs | |
- 'helm/trivy/Chart.yaml' | |
merge_group: | |
workflow_dispatch: | |
env: | |
GO_VERSION: '1.22' | |
jobs: | |
test: | |
name: Test | |
runs-on: ${{ matrix.operating-system }} | |
strategy: | |
matrix: | |
operating-system: [ubuntu-latest, windows-latest, macos-latest] | |
steps: | |
- uses: actions/checkout@v4.1.6 | |
- name: Set up Go | |
uses: actions/setup-go@v5 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
cache: false | |
- name: go mod tidy | |
run: | | |
go mod tidy | |
if [ -n "$(git status --porcelain)" ]; then | |
echo "Run 'go mod tidy' and push it" | |
exit 1 | |
fi | |
if: matrix.operating-system == 'ubuntu-latest' | |
- name: Lint | |
id: lint | |
uses: golangci/golangci-lint-action@v6.1.1 | |
with: | |
version: v1.61 | |
args: --verbose --out-format=line-number | |
if: matrix.operating-system == 'ubuntu-latest' | |
- name: Check if linter failed | |
run: | | |
echo "Linter failed, running 'mage lint:fix' might help to correct some errors" | |
exit 1 | |
if: ${{ failure() && steps.lint.conclusion == 'failure' }} | |
- name: Install tools | |
uses: aquaproj/aqua-installer@v3.0.1 | |
with: | |
aqua_version: v1.25.0 | |
aqua_opts: "" | |
- name: Check if CLI references are up-to-date | |
run: | | |
mage docs:generate | |
if [ -n "$(git status --porcelain)" ]; then | |
echo "Run 'mage docs:generate' and push it" | |
exit 1 | |
fi | |
if: matrix.operating-system == 'ubuntu-latest' | |
- name: Run unit tests | |
run: mage test:unit | |
integration: | |
name: Integration Test | |
runs-on: ubuntu-latest | |
steps: | |
- name: Check out code into the Go module directory | |
uses: actions/checkout@v4.1.6 | |
- name: Set up Go | |
uses: actions/setup-go@v5 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
cache: false | |
- name: Install tools | |
uses: aquaproj/aqua-installer@v3.0.1 | |
with: | |
aqua_version: v1.25.0 | |
- name: Generate image list digest | |
id: image-digest | |
run: | | |
source integration/testimages.ini | |
IMAGE_LIST=$(skopeo list-tags docker://$TEST_IMAGES) | |
DIGEST=$(echo "$IMAGE_LIST" | jq '.Tags += ["containerd"] | .Tags | sort' | sha256sum | cut -d' ' -f1) | |
echo "digest=$DIGEST" >> $GITHUB_OUTPUT | |
- name: Restore test images from cache | |
uses: actions/cache/restore@v4 | |
with: | |
path: integration/testdata/fixtures/images | |
key: cache-test-images-${{ steps.image-digest.outputs.digest }} | |
restore-keys: | |
cache-test-images- | |
- name: Run integration tests | |
run: mage test:integration | |
k8s-integration: | |
name: K8s Integration Test | |
runs-on: ubuntu-latest | |
steps: | |
- name: Check out code into the Go module directory | |
uses: actions/checkout@v4.1.6 | |
- name: Set up Go | |
uses: actions/setup-go@v5 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
cache: false | |
- name: Install tools | |
uses: aquaproj/aqua-installer@v3.0.1 | |
with: | |
aqua_version: v1.25.0 | |
- name: Run k8s integration tests | |
run: mage test:k8s | |
module-test: | |
name: Module Integration Test | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4.1.6 | |
- name: Set up Go | |
uses: actions/setup-go@v5 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
cache: false | |
- name: Install tools | |
uses: aquaproj/aqua-installer@v3.0.1 | |
with: | |
aqua_version: v1.25.0 | |
- name: Generate image list digest | |
id: image-digest | |
run: | | |
source integration/testimages.ini | |
IMAGE_LIST=$(skopeo list-tags docker://$TEST_IMAGES) | |
DIGEST=$(echo "$IMAGE_LIST" | jq '.Tags += ["containerd"] | .Tags | sort' | sha256sum | cut -d' ' -f1) | |
echo "digest=$DIGEST" >> $GITHUB_OUTPUT | |
- name: Restore test images from cache | |
uses: actions/cache/restore@v4 | |
with: | |
path: integration/testdata/fixtures/images | |
key: cache-test-images-${{ steps.image-digest.outputs.digest }} | |
restore-keys: | |
cache-test-images- | |
- name: Run module integration tests | |
shell: bash | |
run: | | |
mage test:module | |
vm-test: | |
name: VM Integration Test | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4.1.6 | |
- name: Set up Go | |
uses: actions/setup-go@v5 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
cache: false | |
- name: Install tools | |
uses: aquaproj/aqua-installer@v3.0.1 | |
with: | |
aqua_version: v1.25.0 | |
- name: Generate image list digest | |
id: image-digest | |
run: | | |
source integration/testimages.ini | |
IMAGE_LIST=$(skopeo list-tags docker://$TEST_VM_IMAGES) | |
DIGEST=$(echo "$IMAGE_LIST" | jq '.Tags | sort' | sha256sum | cut -d' ' -f1) | |
echo "digest=$DIGEST" >> $GITHUB_OUTPUT | |
- name: Restore test VM images from cache | |
uses: actions/cache/restore@v4 | |
with: | |
path: integration/testdata/fixtures/vm-images | |
key: cache-test-vm-images-${{ steps.image-digest.outputs.digest }} | |
restore-keys: | |
cache-test-vm-images- | |
- name: Run vm integration tests | |
run: | | |
mage test:vm | |
build-test: | |
name: Build Test | |
runs-on: ${{ matrix.operating-system }} | |
strategy: | |
matrix: | |
operating-system: [ubuntu-latest, windows-latest, macos-latest] | |
env: | |
DOCKER_CLI_EXPERIMENTAL: "enabled" | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4.1.6 | |
- name: Set up Go | |
uses: actions/setup-go@v5 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
cache: false | |
- name: Determine GoReleaser ID | |
id: goreleaser_id | |
shell: bash | |
run: | | |
if [ "${{ matrix.operating-system }}" == "windows-latest" ]; then | |
echo "id=--id build-windows" >> $GITHUB_OUTPUT | |
elif [ "${{ matrix.operating-system }}" == "macos-latest" ]; then | |
echo "id=--id build-macos --id build-bsd" >> $GITHUB_OUTPUT | |
else | |
echo "id=--id build-linux" >> $GITHUB_OUTPUT | |
fi | |
- name: Run GoReleaser | |
uses: goreleaser/goreleaser-action@v6 | |
with: | |
version: v2.1.0 | |
args: build --snapshot --clean --timeout 90m ${{ steps.goreleaser_id.outputs.id }} |