|
9 | 9 | pull_request: |
10 | 10 | paths-ignore: |
11 | 11 | - '**.md' |
12 | | -env: |
13 | | - # Default minimum version of Go to support. |
14 | | - DEFAULT_GO_VERSION: "~1.21" |
15 | 12 |
|
16 | 13 | permissions: |
17 | 14 | contents: read |
|
24 | 21 | - name: Install Go |
25 | 22 | uses: actions/setup-go@v5 |
26 | 23 | with: |
27 | | - go-version: ${{ env.DEFAULT_GO_VERSION }} |
| 24 | + go-version-file: 'go.mod' |
28 | 25 |
|
29 | 26 | - name: Setup Environment |
30 | 27 | run: | |
@@ -62,25 +59,25 @@ jobs: |
62 | 59 | uses: actions/checkout@v4 |
63 | 60 |
|
64 | 61 | - name: Set up QEMU |
65 | | - uses: docker/setup-qemu-action@master |
| 62 | + uses: docker/setup-qemu-action@v3 |
66 | 63 | with: |
67 | 64 | platforms: all |
68 | 65 | - name: Set up Docker Buildx |
69 | 66 | id: buildx |
70 | | - uses: docker/setup-buildx-action@master |
| 67 | + uses: docker/setup-buildx-action@v3 |
71 | 68 | - name: Build |
72 | 69 | uses: docker/build-push-action@v4 |
73 | 70 | with: |
74 | 71 | builder: ${{ steps.buildx.outputs.name }} |
75 | 72 | context: . |
76 | | - outputs: type=docker,dest=${{ github.workspace }}/open-feature-operator-local.tar |
| 73 | + push: false |
77 | 74 | tags: open-feature-operator-local:${{ github.sha }} |
78 | 75 | cache-from: type=gha,scope=${{ github.ref_name }}-ofo |
79 | 76 | cache-to: type=gha,scope=${{ github.ref_name }}-ofo |
80 | 77 | - name: Run Trivy vulnerability scanner |
81 | | - uses: aquasecurity/trivy-action@master |
| 78 | + uses: aquasecurity/trivy-action@0.27.0 |
82 | 79 | with: |
83 | | - input: /github/workspace/open-feature-operator-local.tar |
| 80 | + image-ref: open-feature-operator-local:${{ github.sha }} |
84 | 81 | format: "template" |
85 | 82 | template: "@/contrib/sarif.tpl" |
86 | 83 | output: "trivy-results.sarif" |
|
89 | 86 | uses: github/codeql-action/upload-sarif@v2 |
90 | 87 | with: |
91 | 88 | sarif_file: "trivy-results.sarif" |
92 | | - - name: Upload image as artifact |
93 | | - uses: actions/upload-artifact@v3 |
94 | | - with: |
95 | | - name: open-feature-operator-local-${{ github.sha }} |
96 | | - path: ${{ github.workspace }}/open-feature-operator-local.tar |
97 | 89 |
|
98 | 90 | e2e_tests: |
99 | 91 | name: E2E Tests |
|
0 commit comments