Skip to content
Validate

feat: add unencrypted, keyring, and external vault providers #15

Sign in to view logs

feat: add unencrypted, keyring, and external vault providers

feat: add unencrypted, keyring, and external vault providers #15

Workflow file for this run

.github/workflows/validate.yaml at 31c33ca
name: Validate
on:
push:
branches:
- main
pull_request:
jobs:
validate:
permissions:
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
runs-on: ubuntu-latest
steps:
- name: Checkout Source
uses: actions/checkout@v4
- name: Set up Go
uses: actions/setup-go@v5
with:
go-version: "^1.24.3"
- name: Init project
run: |
go mod tidy
go generate ./...
# ____ _ _
# / ___| ___ ___ _ _ _ __(_) |_ _ _
# \___ \ / _ \/ __| | | | '__| | __| | | |
# ___) | __/ (__| |_| | | | | |_| |_| |
# |____/ \___|\___|\__,_|_| |_|\__|\__, |
# |___/
- name: Run Gosec Security Scanner
uses: securego/gosec@master
with:
args: "-no-fail -fmt sarif -out results.sarif ./..."
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: results.sarif
# _ _ _
# | | (_)_ __ | |_
# | | | | '_ \| __|
# | |___| | | | | |_
# |_____|_|_| |_|\__|
#
- name: golangci-lint
uses: golangci/golangci-lint-action@v8
with:
version: v2.1.6
# _____ _
# |_ _|__ ___| |_
# | |/ _ \/ __| __|
# | | __/\__ \ |_
# |_|\___||___/\__|
#
- name: Run coverage
# TODO: Add -race flag when the container becomes thread safe
run: go test ./... -coverprofile=coverage.txt -covermode=atomic
- name: Upload coverage to Codecov
uses: codecov/codecov-action@v5
env:
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
with:
files: ./coverage.txt
fail_ci_if_error: false