mirror of
https://github.com/Luzifer/go-openssl.git
synced 2024-12-20 19:01:18 +00:00
Add automated code checks through Github Actions
Signed-off-by: Knut Ahlers <knut@ahlers.me>
This commit is contained in:
parent
77069a53d0
commit
42171ccdf9
3 changed files with 73 additions and 11 deletions
50
.github/workflows/test-and-build.yml
vendored
Normal file
50
.github/workflows/test-and-build.yml
vendored
Normal file
|
@ -0,0 +1,50 @@
|
||||||
|
---
|
||||||
|
|
||||||
|
name: test-and-build
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches: ['*']
|
||||||
|
tags: ['v*']
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
test-and-build:
|
||||||
|
defaults:
|
||||||
|
run:
|
||||||
|
shell: bash
|
||||||
|
|
||||||
|
container:
|
||||||
|
image: luzifer/archlinux
|
||||||
|
env:
|
||||||
|
CGO_ENABLED: 0
|
||||||
|
GOPATH: /go
|
||||||
|
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- name: Enable custom AUR package repo
|
||||||
|
run: echo -e "[luzifer]\nSigLevel = Never\nServer = https://archrepo.hub.luzifer.io/\$arch" >>/etc/pacman.conf
|
||||||
|
|
||||||
|
- name: Install required packages
|
||||||
|
run: |
|
||||||
|
pacman -Syy --noconfirm \
|
||||||
|
git \
|
||||||
|
go \
|
||||||
|
golangci-lint-bin \
|
||||||
|
make \
|
||||||
|
trivy
|
||||||
|
|
||||||
|
- uses: actions/checkout@v3
|
||||||
|
|
||||||
|
- name: Marking workdir safe
|
||||||
|
run: git config --global --add safe.directory /__w/go-openssl/go-openssl
|
||||||
|
|
||||||
|
- name: Lint and test code
|
||||||
|
run: make lint test
|
||||||
|
|
||||||
|
- name: Record benchmark
|
||||||
|
run: make benchmark
|
||||||
|
|
||||||
|
- name: Execute Trivy scan
|
||||||
|
run: make trivy
|
||||||
|
|
||||||
|
...
|
11
.travis.yml
11
.travis.yml
|
@ -1,11 +0,0 @@
|
||||||
dist: bionic
|
|
||||||
language: go
|
|
||||||
|
|
||||||
go:
|
|
||||||
- 1.13.x
|
|
||||||
- 1.14.x
|
|
||||||
- tip
|
|
||||||
|
|
||||||
script:
|
|
||||||
- go vet
|
|
||||||
- go test -v -bench . -cover
|
|
23
Makefile
Normal file
23
Makefile
Normal file
|
@ -0,0 +1,23 @@
|
||||||
|
default:
|
||||||
|
|
||||||
|
benchmark:
|
||||||
|
go test -bench=. ./...
|
||||||
|
|
||||||
|
lint:
|
||||||
|
golangci-lint run ./...
|
||||||
|
|
||||||
|
test:
|
||||||
|
go test -cover -v ./...
|
||||||
|
|
||||||
|
# -- Vulnerability scanning --
|
||||||
|
|
||||||
|
trivy:
|
||||||
|
trivy fs . \
|
||||||
|
--dependency-tree \
|
||||||
|
--exit-code 1 \
|
||||||
|
--format table \
|
||||||
|
--ignore-unfixed \
|
||||||
|
--quiet \
|
||||||
|
--scanners config,license,secret,vuln \
|
||||||
|
--severity HIGH,CRITICAL \
|
||||||
|
--skip-dirs docs
|
Loading…
Reference in a new issue