build(deps): bump sigstore/cosign-installer from 9e9de2292db7abb3f51b7f4808d98f0d347a8919 to 37f387123cf7d4270454d0c351cf673ef28a8662 #218
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| env: | |
| GO_VERSION: '1.20' | |
| permissions: | |
| contents: read | |
| jobs: | |
| checks: | |
| name: Checks | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # v3.5.1 | |
| - name: Set up Go | |
| uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Cache licenses | |
| id: cache-licenses | |
| uses: actions/cache@v3 | |
| with: | |
| path: .licensei.cache | |
| key: licensei-v1-${{ github.ref_name }}-${{ hashFiles('go.sum') }} | |
| restore-keys: | | |
| licensei-v1-${{ steps.set-git-refname.outputs.git_refname }} | |
| licensei-v1-master | |
| licensei-v1 | |
| - name: Download license information for dependencies | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting. | |
| run: make license-cache | |
| - name: List license information for dependencies | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting. | |
| run: ./bin/licensei list | |
| - name: Check dependency licenses | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting. | |
| run: go mod vendor && make license-check | |
| - name: Run lint | |
| run: make lint | |
| build: | |
| name: Build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # v3.5.1 | |
| - name: Set up Go | |
| uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Run build | |
| run: make build build-refresher | |
| test: | |
| name: Test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # v3.5.1 | |
| - name: Set up Go | |
| uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Run tests | |
| run: make test | |
| artifacts: | |
| name: Artifacts | |
| uses: ./.github/workflows/artifacts.yaml | |
| with: | |
| publish: ${{ github.event_name == 'push' && github.ref_name == 'main' }} | |
| permissions: | |
| contents: read | |
| packages: write | |
| id-token: write | |
| security-events: write |