c465d465a5
* update sigstore-go dep to v0.3.0 Signed-off-by: Meredith Lancaster <malancas@github.com> * add integration test to verify newer sigstore bundle versions Signed-off-by: Meredith Lancaster <malancas@github.com> * Fix shellcheck issues Signed-off-by: Meredith Lancaster <malancas@github.com> * Give the cli/package-security team ownership over gh attestation cmd integration tests Signed-off-by: Meredith Lancaster <malancas@github.com> * fetch attestation file Signed-off-by: Meredith Lancaster <malancas@github.com> * clean up new integration test Signed-off-by: Meredith Lancaster <malancas@github.com> * try pulling other attestation file Signed-off-by: Meredith Lancaster <malancas@github.com> * cleanup new attestation verify integration test Signed-off-by: Meredith Lancaster <malancas@github.com> * add new gh atestation integration test to workflow Signed-off-by: Meredith Lancaster <malancas@github.com> * mark script as executable Signed-off-by: Meredith Lancaster <malancas@github.com> * rename the integration test file Signed-off-by: Meredith Lancaster <malancas@github.com> --------- Signed-off-by: Meredith Lancaster <malancas@github.com>
57 lines
1.3 KiB
YAML
57 lines
1.3 KiB
YAML
name: Unit and Integration Tests
|
|
on: [push, pull_request]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
build:
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
os: [ubuntu-latest, windows-latest, macos-latest]
|
|
runs-on: ${{ matrix.os }}
|
|
|
|
steps:
|
|
- name: Check out code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version-file: "go.mod"
|
|
|
|
- name: Download dependencies
|
|
run: go mod download
|
|
|
|
- name: Run tests
|
|
run: go test -race ./...
|
|
|
|
- name: Build
|
|
run: go build -v ./cmd/gh
|
|
|
|
integration-tests:
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
os: [ubuntu-latest, windows-latest, macos-latest]
|
|
runs-on: ${{ matrix.os }}
|
|
|
|
steps:
|
|
- name: Check out code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version-file: "go.mod"
|
|
|
|
- name: Build executable
|
|
run: make
|
|
|
|
- name: Run attestation command integration Tests
|
|
run: |
|
|
./test/integration/attestation-cmd/download-and-verify-package-attestation.sh
|
|
./test/integration/attestation-cmd/verify-sigstore-bundle-versions.sh
|