build(deps): bump sigstore/cosign-installer from 9e9de2292db7abb3f51b7f4808d98f0d347a8919 to ef6a6b364bbad08abd36a5f8af60b595d12702f8 #239
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| env: | |
| GO_VERSION: '1.20' | |
| permissions: | |
| contents: read | |
| jobs: | |
| checks: | |
| name: Checks | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # v3.5.1 | |
| - name: Set up Go | |
| uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Cache licenses | |
| id: cache-licenses | |
| uses: actions/cache@v3 | |
| with: | |
| path: .licensei.cache | |
| key: licensei-v1-${{ github.ref_name }}-${{ hashFiles('go.sum') }} | |
| restore-keys: | | |
| licensei-v1-${{ steps.set-git-refname.outputs.git_refname }} | |
| licensei-v1-master | |
| licensei-v1 | |
| - name: Download license information for dependencies | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting. | |
| run: make license-cache | |
| - name: List license information for dependencies | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting. | |
| run: ./bin/licensei list | |
| - name: Check dependency licenses | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting. | |
| run: go mod vendor && make license-check | |
| - name: Run lint | |
| run: make lint | |
| build: | |
| name: Build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # v3.5.1 | |
| - name: Set up Go | |
| uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Run build | |
| run: make build build-refresher | |
| test: | |
| name: Test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # v3.5.1 | |
| - name: Set up Go | |
| uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Run tests | |
| run: make test | |
| artifacts: | |
| name: Artifacts | |
| uses: ./.github/workflows/artifacts.yaml | |
| with: | |
| publish: ${{ github.event_name == 'push' && github.ref_name == 'main' }} | |
| permissions: | |
| contents: read | |
| packages: write | |
| id-token: write | |
| security-events: write |