Auto validator sid blacklist logging

.github/dependabot.yml

@@ -0,0 +1,15 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "gomod" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"

.github/workflows/helm.yaml

@@ -0,0 +1,58 @@
+---
+name: helm
+on:
+  - push
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+
+      - name: set up helm
+        uses: azure/setup-helm@v4
+        with:
+          version: v3.13.0
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: 3.7
+
+      - name: set up chart-testing
+        uses: helm/[email protected]
+
+      - name: run chart-testing (lint)
+        run: ct lint --all
+
+      - name: create kind cluster
+        uses: helm/[email protected]
+
+      - name: run chart-testing (install)
+        run: ct install --all
+
+  release:
+    runs-on: ubuntu-latest
+    if: ${{ startsWith(github.ref, 'refs/tags/v') }}
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+
+      - name: set up helm
+        uses: azure/setup-helm@v4
+        with:
+          version: v3.13.0
+
+      - name: login to github container registry using helm
+        run: |
+          echo ${{ secrets.GITHUB_TOKEN }} | helm registry login ghcr.io/snapp-incubator/soteria --username ${{ github.repository_owner }} --password-stdin
+
+      - name: package soteria helm chart
+        run: |
+          version=${{ github.ref_name }}
+          helm package --version "${version##v}" --app-version "${version}" ./charts/soteria
+
+      - name: publish soteria chart to github container registry
+        run: |
+          version=${{ github.ref_name }}
+          helm push "soteria-${version##v}".tgz oci://ghcr.io/snapp-incubator/soteria-chart

.github/workflows/test.yaml

@@ -0,0 +1,61 @@
+---
+name: test
+on:
+  - push
+
+jobs:
+  lint:
+    name: lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: "go.mod"
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v6
+        with:
+          version: latest
+          args: --enable-all --timeout=30m
+
+  test:
+    name: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: "go.mod"
+      - run: go test -v ./... -covermode=atomic -coverprofile=coverage.out
+      - uses: codecov/[email protected]
+        with:
+          files: coverage.out
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: snapp-incubator/soteria
+
+  docker:
+    runs-on: ubuntu-latest
+    needs:
+      - lint
+      - test
+    if: github.event_name != 'pull_request'
+    steps:
+      - uses: actions/checkout@v4
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - uses: docker/bake-action@v5
+        if: ${{ startsWith(github.ref, 'refs/tags/v') }}
+        env:
+          TAG: ${{ github.ref_name }}
+        with:
+          push: true
+          files: 'build/package/docker-bake.json'
+      - uses: docker/bake-action@v5
+        if: ${{ !startsWith(github.ref, 'refs/tags/v') }}
+        with:
+          push: true
+          files: 'build/package/docker-bake.json'