setup OSSF Scorecard workflow #1033
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Go | |
| on: | |
| pull_request: | |
| push: | |
| branches: | |
| - main | |
| - "release-*" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ (github.event.pull_request && github.event.pull_request.number) || github.ref || github.run_id }} | |
| cancel-in-progress: true | |
| # Minimal permissions to be inherited by any job that don't declare it's own permissions | |
| permissions: | |
| contents: read | |
| jobs: | |
| supportedVersions: | |
| name: Fetch supported Go versions | |
| runs-on: ubuntu-latest | |
| outputs: | |
| supported_versions: ${{ steps.matrix.outputs.supported_versions }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Read supported_go_versions.txt | |
| id: matrix | |
| run: | | |
| versions=$(cat supported_go_versions.txt) | |
| matrix="[$(echo "$versions" | sed 's/\(.*\)/"\1"/' | paste -s -d,)]" | |
| echo "supported_versions=$matrix" >> $GITHUB_OUTPUT | |
| test: | |
| name: Tests | |
| runs-on: ubuntu-latest | |
| needs: supportedVersions | |
| strategy: | |
| matrix: | |
| go_version: ${{ fromJSON(needs.supportedVersions.outputs.supported_versions) }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Run tests and check license | |
| uses: dagger/dagger-for-github@ad6a4e308a42fb2cf9be8b060f9aba9d57d4c9aa # v6.14.0 | |
| with: | |
| version: "latest" | |
| verb: call | |
| args: -vvv --src . make --go-version ${{matrix.go_version}} --args 'check_license test' | |
| - name: Run style and unused | |
| uses: dagger/dagger-for-github@ad6a4e308a42fb2cf9be8b060f9aba9d57d4c9aa # v6.14.0 | |
| if: ${{ matrix.go_version == '1.21' }} | |
| with: | |
| version: "latest" | |
| verb: call | |
| args: -vvv --src . make --args 'check_license test' |