scan: export FindingsTree and Render #2875
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| on: | |
| pull_request: | |
| branches: ['main'] | |
| push: | |
| branches: ['main'] | |
| permissions: | |
| contents: read | |
| jobs: | |
| build: | |
| permissions: | |
| contents: read | |
| name: build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 | |
| - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 | |
| with: | |
| go-version-file: 'go.mod' | |
| check-latest: true | |
| - uses: chainguard-dev/actions/goimports@2cadca168a422313df94f6169691a86498ae51b1 # main | |
| - run: make wolfictl | |
| - run: make test | |
| wolfictl-text: | |
| permissions: | |
| contents: read | |
| name: wolfictl text on wolfi-dev/os | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 | |
| - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 | |
| with: | |
| go-version-file: 'go.mod' | |
| check-latest: true | |
| - run: make wolfictl | |
| - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 | |
| with: | |
| repository: 'wolfi-dev/os' | |
| path: 'wolfi-os' | |
| - name: Test Wolfi OS repo | |
| run: | | |
| ./wolfictl text -d wolfi-os \ | |
| --type=name \ | |
| --pipeline-dir=wolfi-os/pipelines/ \ | |
| --keyring-append=https://packages.wolfi.dev/bootstrap/stage3/wolfi-signing.rsa.pub \ | |
| --repository-append=https://packages.wolfi.dev/bootstrap/stage3 | |
| - name: Test nested repo structure | |
| run: | | |
| ./wolfictl text -d testdata/text/ | grep foo-0.0.2-r0 | |
| ./wolfictl text -d testdata/text/ | grep bar-0.0.1-r0 | |
| ./wolfictl text -d testdata/text/ | grep root-0.0.1-r0 |