deps: bump actions/dependency-review-action from 4.3.4 to 4.3.5 #251
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: build | |
| permissions: {} # no need any permissions | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| schedule: | |
| - cron: '0 10 * * 1' # run "At 10:00 on Monday" | |
| workflow_call: | |
| inputs: | |
| skipTests: | |
| description: 'Skip tests, useful when there is a dedicated CI job for tests' | |
| default: false | |
| required: false | |
| type: boolean | |
| jobs: | |
| run: | |
| name: Build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| strategy: | |
| fail-fast: true | |
| matrix: | |
| go: ['stable', 'oldstable'] | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| - name: Check out code | |
| uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 | |
| - name: Install Go | |
| uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 | |
| with: | |
| go-version: ${{ matrix.go }} | |
| check-latest: true | |
| - name: Go Format | |
| run: gofmt -s -w . && git diff --exit-code | |
| - name: Go Vet | |
| run: go vet ./... | |
| - name: Go Tidy | |
| run: go mod tidy && git diff --exit-code | |
| - name: Go Mod | |
| run: go mod download | |
| - name: Go Mod Verify | |
| run: go mod verify | |
| - name: Go Generate | |
| run: go generate ./... && git diff --exit-code | |
| - name: Go Build | |
| run: go build -o /dev/null ./... | |
| - name: Go Compile Tests | |
| if: ${{ inputs.skipTests }} | |
| run: go test -exec /bin/true ./... | |
| - name: Go Test | |
| if: ${{ !inputs.skipTests }} | |
| run: go test -v -count=1 -race -shuffle=on -coverprofile=coverage.txt ./... | |
| - name: Go Benchmark | |
| if: ${{ !inputs.skipTests }} | |
| run: go test -v -shuffle=on -run=- -bench=. -benchtime=1x ./... | |
| - name: Upload Coverage | |
| if: ${{ !inputs.skipTests }} | |
| uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0 | |
| continue-on-error: true | |
| with: | |
| token: ${{secrets.CODECOV_TOKEN}} | |
| file: ./coverage.txt | |
| fail_ci_if_error: false |