Update github actions (main) (minor) #2326
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Checks | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| permissions: | |
| contents: read | |
| jobs: | |
| Checks: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | |
| with: | |
| egress-policy: audit | |
| disable-telemetry: true | |
| - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 | |
| - name: Setup Go environment | |
| uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 | |
| with: | |
| cache: true | |
| go-version-file: go.mod | |
| cache-dependency-path: '**/go.sum' | |
| - name: Check go versions | |
| uses: conforma/github-workflows/golang-version-check@cd705e88225322085c339c3985a18b34397e9846 # main | |
| - name: Build all | |
| run: make all | |
| - name: Test | |
| run: make test | |
| - name: Upload unit test coverage report | |
| uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5.5.5 | |
| env: | |
| CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |
| with: | |
| files: ./cover.out | |
| flags: controller | |
| - name: Upload api test coverage report | |
| uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5.5.5 | |
| env: | |
| CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |
| with: | |
| files: ./api_cover.out | |
| flags: api | |
| - name: Upload schema test coverage report | |
| uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5.5.5 | |
| env: | |
| CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |
| with: | |
| files: ./schema_cover.out | |
| flags: schema | |
| # If enterprisecontractpolicy_types.go is updated without a corresponding change to the crd | |
| # an uncommitted change can show. | |
| - name: Check for uncommitted changes | |
| run: | | |
| if ! git diff --exit-code -s; then | |
| for f in $(git diff --exit-code --name-only); do | |
| echo "::error file=$f,line=1,col=1,endColumn=1::File was modified in build" | |
| echo -e "\033[1;33mHint:\033[0m Maybe you need to run \033[1;32mmake all\033[0m" | |
| done | |
| exit 1 | |
| fi |