scorecard/.github/workflows/main.yml
2021-07-29 19:30:26 +00:00

58 lines
2.3 KiB
YAML

# Copyright 2021 Security Scorecard Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
name: build
on: [push, pull_request]
jobs:
validate:
name: Validate
runs-on: ubuntu-latest
# Pull requests from the same repository won't trigger this checks as they were already triggered by the push
if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository
steps:
- name: Clone the code
uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
with:
fetch-depth: 0
- name: Setup Go
uses: actions/setup-go@37335c7bb261b353407cff977110895fa0b4f7d8 # v2.1.3
with:
go-version: '^1.16'
- name: Run presubmit tests
run: |
go env -w GOFLAGS=-mod=mod
make all
- uses: codecov/codecov-action@29386c70ef20e286228c72b668a06fd0e8399192 # v1.5.0
with:
files: e2e/e2e.coverprofile,pkg/pkg.coverprofile,checks/checks.coverprofile
license-check:
name: license boilerplate check
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
- uses: actions/setup-go@37335c7bb261b353407cff977110895fa0b4f7d8 # v2.1.3
with:
go-version: '1.16'
- name: Check license headers
# We need either https://github.com/google/addlicense/pull/70#issuecomment-888099920 or
# https://github.com/google/addlicense/pull/84 landed
# to exclude testdata folders in the repo.
run: |
echo "license check disabled. Will be reenabled soon."
# go env -w GOFLAGS=-mod=mod
# make all
# set -e
# addlicense -l apache -c 'Security Scorecard Authors' -v *
# git diff --exit-code