Refactor CDR and CIS workflows #1873
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Unit Tests and Lints | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| - "[0-9]+.[0-9]+" | |
| - "8.x" | |
| types: [opened, synchronize, reopened] | |
| push: | |
| branches: | |
| - main | |
| - "[0-9]+.[0-9]+" | |
| - "8.x" | |
| workflow_dispatch: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} | |
| cancel-in-progress: true | |
| jobs: | |
| lint: | |
| name: Lint | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 60 | |
| steps: | |
| - name: Check out the repo | |
| uses: actions/checkout@v4 | |
| - name: Initialize hermit | |
| shell: bash | |
| run: | | |
| ./bin/hermit env --raw >> "$GITHUB_ENV" | |
| - name: Initialize poetry | |
| shell: bash | |
| run: | | |
| pip3 install poetry | |
| (cd security-policies && poetry install --no-root) | |
| - name: Pre-commit Hooks | |
| env: | |
| # Skipping golangci-lint as it's tested by golangci-lint | |
| SKIP: golangci-lint | |
| shell: bash | |
| run: | | |
| pre-commit run --all-files | |
| - name: golangci-lint | |
| shell: bash | |
| run: golangci-lint run --out-format colored-line-number | |
| - name: Mage Check | |
| shell: bash | |
| run: mage check | |
| - name: Mage checkLicenseHeaders | |
| shell: bash | |
| run: mage checkLicenseHeaders | |
| - name: Validate mocks | |
| shell: bash | |
| run: just validate-mocks | |
| - name: Terraform fmt | |
| shell: bash | |
| run: terraform fmt -check -recursive | |
| - name: Show git diff on failure | |
| shell: bash | |
| if: ${{ failure() }} | |
| run: git diff | |
| unit-test: | |
| name: Unit Test | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 60 | |
| steps: | |
| - name: Check out the repo | |
| uses: actions/checkout@v4 | |
| - name: Initialize hermit | |
| shell: bash | |
| run: | | |
| ./bin/hermit env --raw >> "$GITHUB_ENV" | |
| - name: Build opa bundle | |
| shell: bash | |
| run: mage buildOpaBundle | |
| - name: Unit-Test | |
| shell: bash | |
| run: | | |
| go install gotest.tools/gotestsum | |
| GOOS=linux TEST_DIRECTORY=./... gotestsum --format pkgname -- -race -coverpkg=./... -coverprofile=cover.out.tmp | |
| cat cover.out.tmp | grep -v "mock_.*.go" | grep -v "elastic/cloudbeat/deploy" > cover.out # remove mock files and deploy dir | |
| - name: Upload coverage artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: coverage-file | |
| path: cover.out | |
| overwrite: true | |
| - name: Send coverage | |
| env: | |
| COVERALLS_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| shell: bash | |
| run: | | |
| go install github.com/mattn/goveralls@latest | |
| goveralls -coverprofile=cover.out -service=github |