3a219c8d3a
Restrict permissions of github token. Pin action versions. Following advice in briansmith/untrusted#50.
103 lines
2.8 KiB
YAML
103 lines
2.8 KiB
YAML
name: ci
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
pull_request:
|
|
schedule:
|
|
- cron: '17 12 * * 6'
|
|
|
|
jobs:
|
|
test:
|
|
strategy:
|
|
matrix:
|
|
go-version: [1.15.x, 1.16.x]
|
|
platform: [ubuntu-latest]
|
|
runs-on: ${{ matrix.platform }}
|
|
steps:
|
|
- name: Install Go
|
|
uses: actions/setup-go@37335c7bb261b353407cff977110895fa0b4f7d8 # v2.1.3
|
|
with:
|
|
go-version: ${{ matrix.go-version }}
|
|
- name: Configure Go Environment
|
|
run: |
|
|
echo GOPATH=${{ runner.workspace }} >> $GITHUB_ENV
|
|
echo ${{ runner.workspace }}/bin >> $GITHUB_PATH
|
|
- name: Go Environment
|
|
run: go env
|
|
- name: Checkout code
|
|
uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
|
|
with:
|
|
persist-credentials: false
|
|
- name: Bootstrap
|
|
run: ./script/bootstrap
|
|
|
|
- name: Build
|
|
run: go build ./...
|
|
- name: Test
|
|
run: go test -bench . ./...
|
|
- name: Coverage
|
|
run: ./script/coverage
|
|
|
|
- name: Upload Unit Test Coverage
|
|
uses: codecov/codecov-action@967e2b38a85a62bd61be5529ada27ebc109948c2 #v1.4.1
|
|
with:
|
|
token: ${{ secrets.CODECOV_TOKEN }}
|
|
file: unittests.coverprofile
|
|
flags: unittests
|
|
- name: Upload Integration Test Coverage
|
|
uses: codecov/codecov-action@967e2b38a85a62bd61be5529ada27ebc109948c2 #v1.4.1
|
|
with:
|
|
token: ${{ secrets.CODECOV_TOKEN }}
|
|
file: integration.coverprofile
|
|
flags: integration
|
|
|
|
lint:
|
|
strategy:
|
|
matrix:
|
|
go-version: [1.16.x]
|
|
platform: [ubuntu-latest]
|
|
runs-on: ${{ matrix.platform }}
|
|
steps:
|
|
- name: Install Go
|
|
uses: actions/setup-go@37335c7bb261b353407cff977110895fa0b4f7d8 # v2.1.3
|
|
with:
|
|
go-version: ${{ matrix.go-version }}
|
|
- name: Configure Go Environment
|
|
run: |
|
|
echo GOPATH=${{ runner.workspace }} >> $GITHUB_ENV
|
|
echo ${{ runner.workspace }}/bin >> $GITHUB_PATH
|
|
- name: Go Environment
|
|
run: go env
|
|
- name: Checkout code
|
|
uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
|
|
with:
|
|
persist-credentials: false
|
|
- name: Bootstrap
|
|
run: ./script/bootstrap
|
|
- name: Lint
|
|
run: ./script/lint
|
|
|
|
thirdparty:
|
|
strategy:
|
|
matrix:
|
|
go-version: [1.15.x, 1.16.x]
|
|
platform: [ubuntu-latest]
|
|
runs-on: ${{ matrix.platform }}
|
|
steps:
|
|
- name: Install Go
|
|
uses: actions/setup-go@37335c7bb261b353407cff977110895fa0b4f7d8 # v2.1.3
|
|
with:
|
|
go-version: ${{ matrix.go-version }}
|
|
- name: Checkout code
|
|
uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
|
|
with:
|
|
persist-credentials: false
|
|
- name: Run Third-Party Tests
|
|
working-directory: ./tests/thirdparty
|
|
run: go test -pkgs packages.json
|