1212 trail_name : ${{ steps.prep.outputs.trail_name }}
1313 steps :
1414 - name : Harden Runner
15- uses : step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17 .0
15+ uses : step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19 .0
1616 with :
1717 egress-policy : audit
1818
5454 kosli_querying_api_token : ${{ secrets.KOSLI_API_TOKEN_PROD }}
5555 sonarqube_token : ${{ secrets.KOSLI_SONARQUBE_TOKEN }}
5656
57+ contract-tests :
58+ name : Contract Tests
59+ runs-on : ubuntu-latest
60+ permissions :
61+ id-token : write
62+ contents : read
63+ steps :
64+ - name : Harden Runner
65+ uses : step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
66+ with :
67+ egress-policy : audit
68+
69+ - uses : actions/checkout@v6
70+
71+ - uses : actions/setup-go@v6
72+ with :
73+ go-version-file : ' .go-version'
74+ check-latest : true
75+
76+ - name : Configure AWS credentials
77+ uses : aws-actions/configure-aws-credentials@v6
78+ with :
79+ role-to-assume : arn:aws:iam::772819027869:role/cli
80+ aws-region : eu-central-1
81+ role-duration-seconds : 2400
82+ role-session-name : ${{ github.event.repository.name }}
83+
84+ - name : Run contract tests
85+ run : make test_contract
86+ env :
87+ KOSLI_GITHUB_TOKEN : ${{ secrets.KOSLI_GITHUB_TOKEN }}
88+
5789 slack-notification-on-failure :
5890 runs-on : ubuntu-24.04
5991 permissions :
@@ -63,11 +95,12 @@ jobs:
6395 [
6496 set-trail-name,
6597 test,
98+ contract-tests,
6699 ]
67- if : ${{ always() && contains(join(needs.*.result, ','), 'failure') && github.ref == 'refs/heads/master ' }}
100+ if : ${{ always() && contains(join(needs.*.result, ','), 'failure') && github.ref == 'refs/heads/main ' }}
68101 steps :
69102 - name : Harden Runner
70- uses : step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17 .0
103+ uses : step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19 .0
71104 with :
72105 egress-policy : audit
73106
0 commit comments