Merge pull request #657 from device-management-toolkit/enable_semgrep… #1797
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #********************************************************************* | |
| # Copyright (c) Intel Corporation 2020 | |
| # SPDX-License-Identifier: Apache-2.0 | |
| #*********************************************************************/ | |
| # This workflow will do a clean install of go dependencies, build the source code and run tests across different versions of go | |
| name: Go CI | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| permissions: | |
| contents: read | |
| jobs: | |
| build: | |
| permissions: | |
| contents: read # for actions/checkout to fetch code | |
| pull-requests: read # for golangci/golangci-lint-action to fetch pull requests | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| go-version: [1.25.x] | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 | |
| with: | |
| egress-policy: audit | |
| - name: Install Go | |
| uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 | |
| with: | |
| go-version: ${{ matrix.go-version }} | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| - name: Install Test Converter and run tests | |
| run: | | |
| export GOPATH="$HOME/go/" | |
| export PATH=$PATH:$GOPATH/bin | |
| go install github.com/jstemmer/go-junit-report/v2@latest | |
| go test -covermode=atomic -coverprofile=coverage.out -race -v ./... > test_output.txt 2>&1 || true | |
| cat test_output.txt | |
| cat test_output.txt | go-junit-report -set-exit-code > mps-router-unit.xml | |
| if grep -q "FAIL" test_output.txt; then exit 1; fi | |
| - name: Format | |
| run: if [ "$(gofmt -s -l . | wc -l)" -gt 0 ]; then exit 1; fi | |
| - name: Run go vet | |
| run: go vet ./... | |
| - name: Run go lint | |
| uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0 | |
| with: | |
| version: latest | |
| - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 | |
| name: Upload Coverage Results | |
| with: | |
| token: ${{secrets.CODECOV_TOKEN}} | |
| - name: GitHub Upload Release Artifacts | |
| if: always() | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: mps-router-unit | |
| path: mps-router-unit.xml | |