fix: create .snyk policy file #306
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: test | |
| # secrets aren't inherited to tasks, so not able to use the reusable as of 2023-02. | |
| # Using workflow directly and will revisit in the future. | |
| # uses: delineaxpm/github-workflows/.github/workflows/test.yml@main | |
| # secrets: inherit | |
| env: | |
| DSV_K8S_TEST_CONFIG: ${{ secrets.DSV_TMG_CONFIG }} | |
| DSV_K8S_TEST_SECRET_PATH: ci:tests:dsv-k8s:sync-test | |
| on: | |
| pull_request: | |
| push: | |
| tags: | |
| - v* | |
| workflow_dispatch: | |
| inputs: | |
| gotestflags: | |
| type: string | |
| description: 'GOTEST_FLAGS to pass' | |
| required: false | |
| default: '--tags=integration' | |
| workflow_call: | |
| inputs: | |
| gotestflags: | |
| type: string | |
| description: 'GOTEST_FLAGS to pass' | |
| required: false | |
| default: '--tags=integration' | |
| defaults: | |
| run: | |
| shell: bash | |
| permissions: | |
| contents: read | |
| # concurrency: | |
| # group: ${{ github.workflow }}-${{ github.ref }}-${{ github.action }} | |
| # cancel-in-progress: true | |
| jobs: | |
| test: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| - uses: aquaproj/aqua-installer@fd2089d1f56724d6456f24d58605e6964deae124 # v2.3.2 | |
| with: | |
| aqua_version: v2.28.0 | |
| enable_aqua_install: true | |
| aqua_opts: '--tags test' | |
| env: | |
| AQUA_LOG_LEVEL: debug | |
| AQUA_OPTS: '' | |
| - name: env-config-go | |
| run: | | |
| echo "$(go env GOPATH)/bin" >> $GITHUB_PATH | |
| # no pinning of github managed action | |
| - name: Setup Golang caches | |
| uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3 | |
| with: | |
| path: | | |
| ${HOME}/.cache/go-build | |
| ${HOME}/go/pkg/mod | |
| key: ${{ runner.os }}-golang-${{ hashFiles('**/go.sum') }} | |
| restore-keys: | | |
| ${{ runner.os }}-golang- | |
| # - name: mage-init | |
| # run: | | |
| # export PATH="${AQUA_ROOT_DIR:-${XDG_DATA_HOME:-$HOME/.local/share}/aquaproj-aqua}/bin/aqua:${PATH}" | |
| # export PATH="$(go env GOPATH)/bin:${PATH}" | |
| # mage init | |
| - name: mage-testsum | |
| run: | | |
| export PATH="${AQUA_ROOT_DIR:-${XDG_DATA_HOME:-$HOME/.local/share}/aquaproj-aqua}/bin/aqua:${PATH}" | |
| export PATH="$(go env GOPATH)/bin:${PATH}" | |
| USER_GOTESTFLAGS="${{ github.event.inputs.name }}" | |
| # Use user input or fall back to --tags=integration if nothing provided | |
| GOTEST_FLAGS=${USER_GOTESTFLAGS:-"--tags=integration"} | |
| mage go:testsum ./... | |
| env: | |
| # Race conditions will be hit due to the cli driven tasks and binaries being called. | |
| GOTEST_DISABLE_RACE: 1 | |
| # GOTEST_FLAGS: '${{ inputs.gotestflags }}' | |
| - uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6 | |
| with: | |
| fail_ci_if_error: false |