chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.8 to 6.7.9 in the all-go-deps group #143
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: ["main"] | |
| pull_request: | |
| branches: ["main"] | |
| jobs: | |
| build-and-test: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Set up Go | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version: "1.26.1" | |
| - name: Build | |
| run: go build -trimpath -ldflags="-s -w" -v ./... | |
| - name: Unit Tests | |
| run: go test -v -count=1 -coverprofile=coverage.out ./... | |
| - name: Upload coverage reports to Codecov | |
| uses: codecov/codecov-action@v5 | |
| with: | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| files: ./coverage.out | |
| flags: unittests | |
| name: codecov-umbrella | |
| fail_ci_if_error: false | |
| integration-tests: | |
| runs-on: ubuntu-latest | |
| needs: build-and-test | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Set up Go | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version: "1.26.1" | |
| - name: Integration Tests | |
| run: go test -v -count=1 -tags integration ./tests/integration/... | |
| e2e-tests: | |
| runs-on: ubuntu-latest | |
| needs: build-and-test | |
| if: github.event_name == 'push' && github.ref == 'refs/heads/main' | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Set up Go | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version: "1.26.1" | |
| - name: Build efctl | |
| run: go build -trimpath -ldflags="-s -w" -o output/efctl main.go | |
| - name: Verify Docker | |
| run: docker info | |
| - name: E2E Tests | |
| run: | | |
| EFCTL_BINARY=${{ github.workspace }}/output/efctl \ | |
| go test -v -count=1 -tags e2e -timeout 15m ./tests/e2e/... | |
| env: | |
| CI: "true" | |
| DOCKER_HOST: unix:///var/run/docker.sock | |
| EFCTL_ENGINE: docker | |
| security: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Set up Go | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version: "1.26.1" | |
| - name: Install gosec | |
| run: go install github.com/securego/gosec/v2/cmd/gosec@latest | |
| - name: Run gosec | |
| run: | | |
| gosec -severity medium -confidence medium -fmt json -out gosec-ci-results.json ./... | |
| EXIT_CODE=$? | |
| if [ $EXIT_CODE -ne 0 ] && [ $EXIT_CODE -ne 2 ]; then | |
| echo "::error::gosec crashed with exit code $EXIT_CODE" | |
| exit $EXIT_CODE | |
| fi | |
| - name: Check gosec results | |
| run: | | |
| if [ -f gosec-ci-results.json ]; then | |
| ISSUES=$(cat gosec-ci-results.json | go run -mod=mod github.com/itchyny/gojq/cmd/gojq@latest '[.Issues[] | select(.nosec == false and (.severity == "HIGH" or .severity == "MEDIUM"))] | length' 2>/dev/null || echo "0") | |
| echo "Unresolved HIGH/MEDIUM gosec findings: $ISSUES" | |
| if [ "$ISSUES" -gt 0 ]; then | |
| echo "::error::gosec found $ISSUES unresolved HIGH/MEDIUM findings" | |
| cat gosec-ci-results.json | go run -mod=mod github.com/itchyny/gojq/cmd/gojq@latest '.Issues[] | select(.nosec == false and (.severity == "HIGH" or .severity == "MEDIUM")) | "\(.severity) \(.rule_id) \(.file):\(.line) \(.details)"' | |
| exit 1 | |
| fi | |
| fi | |
| - name: Install govulncheck | |
| run: go install golang.org/x/vuln/cmd/govulncheck@latest | |
| - name: Run govulncheck | |
| run: govulncheck ./... | |
| - name: Upload gosec results | |
| if: always() | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| name: gosec-results | |
| path: gosec-ci-results.json |