chore(deps-dev): update github/codeql-action action to v3.27.3 #193
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: pr-build | |
| on: | |
| pull_request: | |
| types: | |
| - opened | |
| - synchronize | |
| - reopened | |
| permissions: {} | |
| jobs: | |
| lint-chart: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Helm | |
| uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 #v3.5 | |
| with: | |
| version: v3.4.0 | |
| - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0 | |
| with: | |
| python-version: 3.7 | |
| - name: Set up chart-testing | |
| uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1 | |
| - name: Run chart-testing (list-changed) | |
| id: list-changed | |
| run: | | |
| changed=$(ct list-changed --target-branch=master --chart-dirs chart) | |
| if [[ -n "$changed" ]]; then | |
| echo "::set-output name=changed::true" | |
| fi | |
| - name: Run chart-testing (lint) | |
| run: ct lint --target-branch=master --chart-dirs chart --check-version-increment=false | |
| fmt: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 | |
| - name: Setup Go | |
| uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0 | |
| with: | |
| go-version: 1.22.x | |
| - name: fmt | |
| run: make fmt | |
| - name: vet | |
| run: make vet | |
| - name: lint | |
| run: make lint | |
| - name: Check if working tree is dirty | |
| run: | | |
| if [[ $(git diff --stat) != '' ]]; then | |
| git --no-pager diff | |
| echo 'run <make test> and commit changes' | |
| exit 1 | |
| fi | |
| test: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| kubernetes-version: | |
| - "1.27" | |
| - "1.28" | |
| - "1.29" | |
| - "1.30" | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 | |
| - name: Setup Go | |
| uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0 | |
| with: | |
| go-version: 1.22.x | |
| - name: run test | |
| run: make test ENVTEST_K8S_VERSION=${{ matrix.kubernetes-version }} | |
| build: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| profiles: ${{ steps.profiles.outputs.matrix }} | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 | |
| - name: Setup Go | |
| uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0 | |
| with: | |
| go-version: 1.22.x | |
| - name: build | |
| run: make build | |
| - name: Check if working tree is dirty | |
| run: | | |
| if [[ $(git diff --stat) != '' ]]; then | |
| git --no-pager diff | |
| echo 'run <make test> and commit changes' | |
| exit 1 | |
| fi | |
| - name: Build container image | |
| run: | | |
| make docker-build | |
| - name: Create image tarball | |
| run: | | |
| docker save --output swagger-hub-controller-container.tar swagger-hub-controller:latest | |
| - name: Upload image | |
| uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 | |
| with: | |
| name: swagger-hub-controller-container | |
| path: swagger-hub-controller-container.tar | |
| - id: profiles | |
| name: Determine test profiles | |
| run: | | |
| profiles=$(ls config/tests/cases | jq -R -s -c 'split("\n")[:-1]') | |
| echo $profiles | |
| echo "::set-output name=matrix::$profiles" | |
| e2e-tests: | |
| runs-on: ubuntu-latest | |
| needs: | |
| - build | |
| strategy: | |
| matrix: | |
| profile: ${{ fromJson(needs.build.outputs.profiles) }} | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 | |
| - name: Setup Go | |
| uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0 | |
| with: | |
| go-version: 1.22.x | |
| - name: Setup Kubernetes | |
| uses: engineerd/setup-kind@aa272fe2a7309878ffc2a81c56cfe3ef108ae7d0 #v0.5.0 | |
| with: | |
| version: v0.17.0 | |
| - name: Download swagger-hub-controller container | |
| uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 | |
| with: | |
| name: swagger-hub-controller-container | |
| path: /tmp | |
| - name: Load images | |
| run: | | |
| docker load --input /tmp/swagger-hub-controller-container.tar | |
| docker image ls -a | |
| - name: Setup Kustomize | |
| uses: imranismail/setup-kustomize@2ba527d4d055ab63514ba50a99456fc35684947f # v2.1.0 | |
| - name: Run test | |
| run: | | |
| make kind-test TEST_PROFILE=${{ matrix.profile }} | |
| - name: Debug failure | |
| if: failure() | |
| run: | | |
| kubectl -n kube-system describe pods | |
| kubectl -n swagger-system describe pods | |
| kubectl -n swagger-system get all | |
| kubectl -n swagger-system logs deploy/swagger-hub-controller | |
| kubectl -n swagger-system get swaggerhubs -o yaml | |
| test-chart: | |
| runs-on: ubuntu-latest | |
| needs: | |
| - build | |
| - lint-chart | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Helm | |
| uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 #v3.5 | |
| - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0 | |
| with: | |
| python-version: 3.7 | |
| - name: Set up chart-testing | |
| uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1 | |
| - name: Create kind cluster | |
| uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde # v1.10.0 | |
| - name: Download swagger-hub-controller container | |
| uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 | |
| with: | |
| name: swagger-hub-controller-container | |
| path: /tmp | |
| - name: Load image | |
| run: | | |
| docker load --input /tmp/swagger-hub-controller-container.tar | |
| docker tag swagger-hub-controller:latest ghcr.io/doodlescheduling/swagger-hub-controller:v0.0.0 | |
| kind load docker-image ghcr.io/doodlescheduling/swagger-hub-controller:v0.0.0 --name chart-testing | |
| docker image ls -a | |
| - name: Run chart-testing (install) | |
| run: ct install --target-branch=master --chart-dirs chart | |
| test-success: | |
| runs-on: ubuntu-latest | |
| needs: [test, e2e-tests] | |
| steps: | |
| - run: echo "all tests succeeded" |