Upgrade Test Dependencies to mitigate CVE-2024-3817 #6
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Preview | |
| on: | |
| pull_request: | |
| concurrency: | |
| group: terraform-google-secret-manager | |
| cancel-in-progress: false | |
| jobs: | |
| pre-commit: | |
| runs-on: ubuntu-latest | |
| name: Static Analysis | |
| steps: | |
| - name: Checkout | |
| # actions/[email protected] | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 | |
| with: | |
| fetch-depth: 0 | |
| - name: Setup asdf | |
| # asdf-vm/actions/[email protected] | |
| uses: asdf-vm/actions/plugins-add@05e0d2ed97b598bfce82fd30daf324ae0c4570e6 | |
| - name: Install tools via asdf | |
| run: asdf install | |
| - name: Set up Golang | |
| # actions/[email protected] | |
| uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 | |
| with: | |
| go-version: 1.22.0 | |
| - name: Set up Terradoc | |
| # for security reasons we pin commit ids and not tags. | |
| # mineiros-io/terradoc@main -> af1a7b3ae3635958adf5ee2f40e0c3e70fd0803a | |
| run: go install github.com/mineiros-io/terradoc/cmd/terradoc@af1a7b3ae3635958adf5ee2f40e0c3e70fd0803a | |
| env: | |
| GOPROXY: direct | |
| - name: Cache plugin dir | |
| # for security reasons we pin commit ids and not tags. | |
| # actions/[email protected] -> 13aacd865c20de90d75de3b17ebe84f7a17d57d2 | |
| uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 | |
| with: | |
| path: ~/.tflint.d/plugins | |
| key: tflint-${{ hashFiles('.tflint.hcl') }} | |
| - name: Init TFLint | |
| run: tflint --init | |
| env: | |
| # https://github.com/terraform-linters/tflint/blob/master/docs/user-guide/plugins.md#avoiding-rate-limiting | |
| GITHUB_TOKEN: ${{ github.token }} | |
| - name: Setup and run pre-commit | |
| # for security reasons we pin commit ids and not tags. | |
| # pre-commit/[email protected] -> 2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd | |
| uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd | |
| unit-tests: | |
| # needs: pre-commit | |
| runs-on: ubuntu-latest | |
| name: Unit Tests | |
| steps: | |
| - name: Checkout | |
| # actions/[email protected] | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 | |
| with: | |
| fetch-depth: 0 | |
| - name: Setup asdf | |
| # asdf-vm/actions/[email protected] | |
| uses: asdf-vm/actions/plugins-add@05e0d2ed97b598bfce82fd30daf324ae0c4570e6 | |
| - name: Install tools via asdf | |
| run: asdf install | |
| - name: Set up Golang | |
| # actions/[email protected] | |
| uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 | |
| with: | |
| go-version: 1.22.0 | |
| - name: Run Unit Tests | |
| run: make test/unit-tests | |
| env: | |
| GOOGLE_CREDENTIALS: ${{ secrets.MINEIROS_TESTING_GCP_SA_KEY_FILE }} | |
| TEST_GCP_PROJECT: ${{ secrets.MINEIROS_TESTING_GCP_PROJECT }} | |
| TEST_GCP_ORG_DOMAIN: ${{ secrets.MINEIROS_TESTING_GCP_ORG_DOMAIN }} |