Bump sigstore/cosign-installer from 3.5.0 to 3.7.0 #423
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: PR Build | |
on: | |
pull_request: {} | |
workflow_dispatch: {} | |
jobs: | |
validate: | |
runs-on: ubuntu-22.04 | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout | |
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 | |
- name: Setup go | |
uses: actions/setup-go@v5 | |
with: | |
go-version: 1.22.2 | |
- name: Lint | |
run: make lint | |
- name: Test | |
run: make test | |
build: | |
runs-on: ubuntu-22.04 | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout | |
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 | |
- name: Set up QEMU | |
uses: docker/setup-qemu-action@v3 | |
- name: Set up Docker Buildx | |
uses: docker/setup-buildx-action@v3 | |
- name: Install regctl | |
uses: regclient/actions/regctl-installer@b6614f5f56245066b533343a85f4109bdc38c8cc # main | |
- name: Build image | |
run: make docker-build | |
- name: Export images | |
run: tar -czvf images.tar.gz *-image.tar | |
- name: Archive images | |
uses: actions/upload-artifact@v4 | |
with: | |
name: images | |
path: images.tar.gz | |
integration-test: | |
runs-on: ubuntu-22.04 | |
needs: [build] | |
permissions: | |
contents: read | |
strategy: | |
fail-fast: false | |
matrix: | |
# Choose tags corresponding to the version of Kind being used. | |
# At a minimum, we should test the currently supported versions of | |
# Kubernetes, but can go back farther as long as we don't need heroics | |
# to pull it off (i.e. kubectl version juggling). | |
k8s-version: | |
- v1.29.1 | |
- v1.28.6 | |
- v1.27.10 | |
- v1.26.13 | |
- v1.25.16 | |
- v1.24.17 | |
- v1.23.17 | |
steps: | |
- name: Checkout | |
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 | |
- name: Install regctl | |
uses: regclient/actions/regctl-installer@b6614f5f56245066b533343a85f4109bdc38c8cc # main | |
- name: Download archived images | |
uses: actions/download-artifact@v4 | |
with: | |
name: images | |
path: . | |
- name: Load archived images | |
run: | | |
tar xvf images.tar.gz | |
make load-images | |
- name: Run integration tests | |
run: K8S_VERSION=${{ matrix.k8s-version }} test/run.sh | |
success: | |
runs-on: ubuntu-22.04 | |
needs: [validate, integration-test] | |
permissions: | |
contents: read | |
steps: | |
- name: Declare victory! | |
run: echo "# Successful" >> $GITHUB_STEP_SUMMARY |