Skip to content

SEC-090: Automated trusted workflow pinning (2024-04-29) #847

SEC-090: Automated trusted workflow pinning (2024-04-29)

SEC-090: Automated trusted workflow pinning (2024-04-29) #847

Workflow file for this run

name: Test
on:
pull_request:
branches: [ main ]
paths-ignore:
- 'README.md'
- 'CHANGELOG.md'
- 'website/*'
push:
branches: [ main ]
paths-ignore:
- 'README.md'
- 'CHANGELOG.md'
- 'website/*'
jobs:
build:
name: Build
runs-on: ubuntu-latest
timeout-minutes: 5
strategy:
matrix:
go-version: [ '1.21', '1.22' ]
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
with:
go-version: ${{ matrix.go-version }}
- name: Run linters
uses: golangci/golangci-lint-action@3cfe3a4abbb849e10058ce4af15d205b6da42804 # v4.0.0
with:
version: latest
- name: Generate
run: make generate
- name: Confirm no diff
run: |
git diff --compact-summary --exit-code || \
(echo "*** Unexpected differences after code generation. Run 'make generate' and commit."; exit 1)
- name: Build
run: make build
test:
name: 'Acc. Tests (OS: ${{ matrix.os }} / TF: ${{ matrix.terraform }})'
needs: build
runs-on: ${{ matrix.os }}
timeout-minutes: 15
strategy:
fail-fast: false
matrix:
os:
- macos-latest
- windows-latest
- ubuntu-latest
terraform: ${{ fromJSON(vars.TF_VERSIONS_PROTOCOL_V5) }}
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
with:
go-version-file: 'go.mod'
- name: Setup Terraform ${{ matrix.terraform }}
uses: hashicorp/setup-terraform@97f030cf6dc0b4f5e0da352c7bca9cca34579800 # v3.1.0
with:
terraform_version: ${{ matrix.terraform }}
terraform_wrapper: false
- name: Run acceptance test
run: make testacc