build(deps): bump sigstore/cosign-installer from 9e9de2292db7abb3f51b7f4808d98f0d347a8919 to 4a861528be5e691840a69536975ada1d4c30349d #232
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| env: | |
| GO_VERSION: '1.20' | |
| permissions: | |
| contents: read | |
| jobs: | |
| checks: | |
| name: Checks | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # v3.5.1 | |
| - name: Set up Go | |
| uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Cache licenses | |
| id: cache-licenses | |
| uses: actions/cache@v3 | |
| with: | |
| path: .licensei.cache | |
| key: licensei-v1-${{ github.ref_name }}-${{ hashFiles('go.sum') }} | |
| restore-keys: | | |
| licensei-v1-${{ steps.set-git-refname.outputs.git_refname }} | |
| licensei-v1-master | |
| licensei-v1 | |
| - name: Download license information for dependencies | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting. | |
| run: make license-cache | |
| - name: List license information for dependencies | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting. | |
| run: ./bin/licensei list | |
| - name: Check dependency licenses | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting. | |
| run: go mod vendor && make license-check | |
| - name: Run lint | |
| run: make lint | |
| build: | |
| name: Build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # v3.5.1 | |
| - name: Set up Go | |
| uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Run build | |
| run: make build build-refresher | |
| test: | |
| name: Test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # v3.5.1 | |
| - name: Set up Go | |
| uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Run tests | |
| run: make test | |
| artifacts: | |
| name: Artifacts | |
| uses: ./.github/workflows/artifacts.yaml | |
| with: | |
| publish: ${{ github.event_name == 'push' && github.ref_name == 'main' }} | |
| permissions: | |
| contents: read | |
| packages: write | |
| id-token: write | |
| security-events: write |