CopilotandJguer
6749bf7682
* Initial plan * Restrict GitHub workflow token permissions Co-authored-by: Jguer <8071073+Jguer@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: Jguer <8071073+Jguer@users.noreply.github.com>
54 lines
1.6 KiB
YAML
54 lines
1.6 KiB
YAML
name: Test against pacman
|
|
on:
|
|
pull_request:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
build:
|
|
name: Lint and test yay
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: ghcr.io/jguer/yay-builder:latest
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
|
|
with:
|
|
go-version-file: go.mod
|
|
- uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
|
|
with:
|
|
path: ~/go/pkg/mod
|
|
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-go-
|
|
- name: Lint
|
|
env:
|
|
GOFLAGS: -buildvcs=false -tags=next
|
|
run: /app/bin/golangci-lint run -v ./...
|
|
- name: Vulnerability scan
|
|
env:
|
|
GOFLAGS: -buildvcs=false
|
|
run: go run golang.org/x/vuln/cmd/govulncheck@latest ./...
|
|
- name: Run Build and Tests
|
|
run: make test
|
|
|
|
- name: Run Integration Tests
|
|
continue-on-error: true
|
|
run: |
|
|
useradd -m yay &&
|
|
chown -R yay:yay . &&
|
|
cp -r ~/go/ /home/yay/go/ &&
|
|
chown -R yay:yay /home/yay/go/ &&
|
|
su yay -c "make test-integration"
|
|
- name: Build yay Artifact
|
|
env:
|
|
GOFLAGS: -buildvcs=false -tags=next
|
|
run: make
|
|
- name: Upload yay Artifact
|
|
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
|
with:
|
|
name: yay
|
|
path: ./yay
|
|
if-no-files-found: error
|
|
overwrite: true |