Adding dockertest to project

.github/workflows/code_scanners.yml

@@ -0,0 +1,40 @@
+name: Code Scanners
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+
+env:
+  GO_VERSION: 1.21
+
+
+permissions:
+  contents: read
+  # Optional: allow read access to pull request. Use with `only-new-issues` option.
+  # pull-requests: read
+
+
+jobs:
+  code_scanning:
+    strategy:
+      matrix:
+        job_name: [security, vuln_check, lint]
+
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Source
+        uses: actions/checkout@v3
+      - uses: actions/setup-go@v4
+        with:
+          go-version: "1.21.2"
+          cache: false
+      - name: Install Task
+        run: sh -c "$(curl --location https://taskfile.dev/install.sh)" -- -d
+      - name: Installing Go Tools
+        run: ./bin/task install_tools      
+      - name: Running Scan
+        run: ./bin/task ${{ matrix.job_name }}
+

.github/workflows/go.yml

@@ -6,32 +6,17 @@ on:
       - master
   pull_request:
 
+
 jobs:
   test:
     strategy:
       matrix:
-        go: [ 1.21.0]
-        grafana: [ 9.4.3, 10.0.0 ]
+        go: [ 1.21.0 ]
+        grafana: [ 8.5.22, 9.4.3, 10.1.4 ]
 
     env:
       GRAFANA_INTEGRATION: 1
 
-    services:
-      minio:
-        image: bitnami/minio:latest
-        ports:
-          - 9000:9000
-          - 9001:9001
-        options: >-
-          -e GF_AUTH_ANONYMOUS_ENABLED=true -e MINIO_ROOT_USER="test" -e MINIO_ROOT_PASSWORD="secretsss"
-      grafana:
-        # Docker Hub image
-        image: "grafana/grafana:${{ matrix.grafana }}"
-        ports:
-          - 3000:3000
-        options: >-
-          -e GF_AUTH_ANONYMOUS_ENABLED=true
-
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
@@ -51,16 +36,14 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-go-
 
-      - name: Wait for Minio to come up.
-        run: nc -z -v -w15 127.0.0.1 9000
       - name: Calc coverage
-        if: "${{ matrix.go == '1.21.0' && matrix.grafana == '9.4.3' }}"
+        if: "${{ matrix.go == '1.21.0' && matrix.grafana == '10.1.4' }}"
         run: |
           go test -v -covermode=atomic -coverprofile=coverage.out ./...
       - name: Convert coverage.out to coverage.lcov
-        if: "${{ matrix.go == '1.21.0' && matrix.grafana == '9.4.3' }}"
+        if: "${{ matrix.go == '1.21.0' && matrix.grafana == '10.1.4' }}"
         uses: jandelgado/[email protected]
       - name: Test
-        if: "${{ matrix.grafana != '9.4.3' }}"
+        if: "${{ matrix.grafana != '10.1.4' }}"
         run: go test -v ./...
 

Taskfile.yml

@@ -20,14 +20,20 @@ tasks:
     cmds:
       - go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
       - go install github.com/client9/misspell/cmd/misspell@latest
+      - go install github.com/securego/gosec/v2/cmd/gosec@master
+      - go install golang.org/x/vuln/cmd/govulncheck@latest
   format:
     desc: "Format code"
     cmds:
       - gofmt -w -s .
+  security:
+    desc: "Run security scan"
+    cmds:
+      - gosec --exclude=G402,G304  ./...
   lint:
     desc: "Lint project, skipping test files."
     cmds:
-      - golangci-lint run --skip-dirs "(^|/)test($|/)" --skip-files "_test.go"  ./... 
+      - golangci-lint run --timeout=30m --skip-dirs "(^|/)test($|/)" --skip-files "_test.go"  ./... 
   spellcheck:
     desc: "Check Spelling across code"
     cmds:
@@ -62,10 +68,6 @@ tasks:
       - go install -ldflags "{{ .LD_FLAGS}}"
       - mv ${GOPATH}/bin/gdg ${GOPATH}/bin/{{ .BIN_NAME }}
     silent: false
-  test: 
-    desc:  "Dos tuff"
-    cmds:
-      - echo ${GOPATH}
   get-deps:
     desc:  "Tidy Deps"
     cmds:
@@ -103,6 +105,12 @@ tasks:
     cmds:
       - goreleaser release
   test:
-      desc: ""
+      desc: "test check"
       cmds:
         - go test -v ./... -cover
+      env:
+        GRAFANA_INTEGRATION: "1"
+  vuln_check:
+      desc: "Vulnerability check"
+      cmds:
+        - govulncheck ./...

docker/Dockerfile

@@ -1,5 +1,5 @@
 # Build Stage
-FROM golang:1.20.0  AS build-stage
+FROM golang:1.21.2  AS build-stage
 
 LABEL app="build-gdg"
 LABEL REPO="https://github.com/esnet/gdg"
@@ -15,7 +15,7 @@ WORKDIR /go/src/github.com/esnet/gdg
 RUN make build-alpine
 
 # Final Stage
-FROM golang:1.20.0 
+FROM golang:1.21.2 
 
 ARG GIT_COMMIT
 ARG VERSION