chore(deps): update docker/setup-buildx-action digest to c47758b (main) #523
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: PR Test operator | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| - rhdh-1.[0-9]+ | |
| - 1.[0-9]+.x | |
| - release-1.[0-9]+ | |
| jobs: | |
| pr-validate: | |
| name: PR Validate | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 | |
| with: | |
| fetch-depth: 0 | |
| # check changes in this commit for regex include and exclude matches; pipe to an env var | |
| - name: Check for changes to build | |
| run: | | |
| # don't fail if nothing returned by grep | |
| set +e | |
| CHANGES="$(git diff --name-only ${{ github.event.pull_request.base.sha }}..${{ github.event.pull_request.head.sha }} | \ | |
| grep -E "workflows/pr.yaml|Makefile|bundle/|config/|go.mod|go.sum|.+\.go" | \ | |
| grep -v -E "/.rhdh/")"; | |
| echo "Changed files for this commit:" | |
| echo "==============================" | |
| echo "$CHANGES" | |
| echo "==============================" | |
| { | |
| echo 'CHANGES<<EOF' | |
| echo $CHANGES | |
| echo EOF | |
| } >> "$GITHUB_ENV" | |
| - name: Setup Go | |
| uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5 | |
| with: | |
| go-version-file: 'go.mod' | |
| # gosec needs a "build" stage so connect it to the lint step which we always do | |
| - name: build | |
| run: make lint | |
| - name: Start Minikube | |
| # run this stage only if there are changes that match the includes and not the excludes | |
| if: ${{ env.CHANGES != '' }} | |
| uses: medyagh/setup-minikube@latest | |
| - name: Run Controller | |
| # run this stage only if there are changes that match the includes and not the excludes | |
| if: ${{ env.CHANGES != '' }} | |
| run: make install run & | |
| - name: Test | |
| # run this stage only if there are changes that match the includes and not the excludes | |
| if: ${{ env.CHANGES != '' }} | |
| run: make test | |
| - name: Generic Integration test | |
| # run this stage only if there are changes that match the includes and not the excludes | |
| # perform it on backstage.io for speed | |
| if: ${{ env.CHANGES != '' }} | |
| run: make integration-test PROFILE=backstage.io USE_EXISTING_CLUSTER=true USE_EXISTING_CONTROLLER=true | |
| - name: RHDH specific Integration test | |
| # run this stage only if there are changes that match the includes and not the excludes | |
| if: ${{ env.CHANGES != '' }} | |
| run: make integration-test ARGS='--focus "create default rhdh"' USE_EXISTING_CLUSTER=true USE_EXISTING_CONTROLLER=true | |
| - name: Run Gosec Security Scanner | |
| run: make gosec | |
| - name: Upload SARIF file | |
| uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3 | |
| with: | |
| # Path to SARIF file relative to the root of the repository | |
| sarif_file: gosec.sarif |