kong-operator/.github/workflows/falco-analyzed-e2e.yaml at 05fef3accbca2d6b63876b765ddc0a910e7c07fa · Kong/kong-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
name: falco-analyzed-e2e

on:
  workflow_dispatch:

permissions:
  contents: read

env:
  MISE_VERBOSE: 1

jobs:
  run-e2e:
    runs-on: ubuntu-latest
    outputs:
      falco_result: ${{ steps.falco_result.outcome }}
    steps:
    - name: start falco
      continue-on-error: true
      uses: falcosecurity/falco-actions/start@4a4ff48cca452b3b03f06073d1ae0ff564503fc9
      with:
        mode: analyze

    - name: checkout repository
      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        fetch-depth: 0

    - name: setup golang
      uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
      with:
        go-version-file: go.mod

    - name: build docker image
      env:
        IMG: kong-operator
        TAG: e2e-${{ github.sha }}
      run: make docker.build

    - uses: jdx/mise-action@c1ecc8f748cd28cdeabf76dab3cccde4ce692fe4 # v4.0.0
      with:
        install: false

    - name: run e2e tests
      run: make test.e2e
      env:
        KONG_TEST_KONG_OPERATOR_IMAGE_LOAD: kong-operator:e2e-${{ github.sha }}
        GOTESTSUM_JUNITFILE: "e2e-tests.xml"
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    - name: upload diagnostics
      if: always()
      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
      with:
        name: diagnostics-e2e
        path: /tmp/ktf-diag*
        if-no-files-found: ignore

    - name: stop falco and upload results
      id: falco_result
      continue-on-error: true
      uses: falcosecurity/falco-actions/stop@4a4ff48cca452b3b03f06073d1ae0ff564503fc9
      with:
        mode: analyze

  analyze_falco_results:
    name: Analyze Falco Results
    runs-on: ubuntu-latest
    timeout-minutes: 30
    needs: run-e2e
    if: contains(needs.run-e2e.result, 'success') && needs.run-e2e.outputs.falco_result == 'success'
    permissions:
      contents: read
      actions: read
    steps:
      - name: Checkout Source Code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Analyze Falco Results
        uses: falcosecurity/falco-actions/analyze@4a4ff48cca452b3b03f06073d1ae0ff564503fc9
        continue-on-error: true