chore(deps): update anchore dependencies #1600
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Validations" | |
| on: | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| permissions: {} | |
| jobs: | |
| Static-Analysis: | |
| # Note: changing this job name requires making the same update in the .github/workflows/release.yaml pipeline | |
| name: "Static analysis" | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| - name: Bootstrap environment | |
| uses: ./.github/actions/bootstrap | |
| - name: Run static analysis | |
| run: make static-analysis | |
| Unit-Test: | |
| # Note: changing this job name requires making the same update in the .github/workflows/release.yaml pipeline | |
| name: "Unit tests" | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| - name: Bootstrap environment | |
| uses: ./.github/actions/bootstrap | |
| - name: Run unit tests | |
| run: make unit | |
| - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: unit-test-results | |
| path: test/results/**/* | |
| Integration-Test: | |
| # Note: changing this job name requires making the same update in the .github/workflows/release.yaml pipeline | |
| name: "Integration tests" | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| - name: Bootstrap environment | |
| uses: ./.github/actions/bootstrap | |
| with: | |
| # needed for rootless containerd | |
| bootstrap-apt-packages: "rootlesskit" | |
| # needed to key the integration test/tool caches below | |
| compute-fingerprints: "true" | |
| - name: Enable systemd for podman socket activation | |
| run: | | |
| set -x | |
| loginctl enable-linger $(whoami) | |
| # we need to make certain that the bus instance is up and ready before systemctl attempts to use it. | |
| # if we can figure a non-racey way to do this, that would be nice. | |
| sleep 5 | |
| export XDG_RUNTIME_DIR=/run/user/$UID | |
| mkdir -p $HOME/.config/systemd/user | |
| systemctl --user enable --now podman.socket | |
| sudo systemctl enable --now podman.socket | |
| sudo systemctl start podman.socket | |
| sleep 1 | |
| # simple test to make sure the daemon is up and running | |
| podman images ls | |
| sudo podman images ls | |
| - name: Setup containerd | |
| uses: crazy-max/ghaction-setup-containerd@b1962824078138dddccdf925db7402a9428c4aca #v3.2.0 | |
| - name: Configure rootless containerd | |
| run: | | |
| set -x | |
| mkdir ~/.local/bin | |
| pushd ~/.local/bin | |
| curl -O https://raw.githubusercontent.com/containerd/nerdctl/v1.5.0/extras/rootless/containerd-rootless.sh | |
| curl -O https://raw.githubusercontent.com/containerd/nerdctl/v1.5.0/extras/rootless/containerd-rootless-setuptool.sh | |
| chmod 755 containerd-rootless.sh containerd-rootless-setuptool.sh | |
| popd | |
| containerd-rootless-setuptool.sh install | |
| sleep 1 | |
| export CONTAINERD_ADDRESS=/proc/$(cat $XDG_RUNTIME_DIR/containerd-rootless/child_pid)/root/run/containerd/containerd.sock | |
| # simple test to make sure the daemon is up and running | |
| ctr image ls | |
| sudo ctr image ls | |
| - name: Restore integration test-fixture cache | |
| uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5 | |
| with: | |
| path: ${{ github.workspace }}/test/integration/testdata/cache | |
| key: ${{ runner.os }}-integration-test-cache-${{ hashFiles('test/integration/testdata/cache.fingerprint') }} | |
| - name: Restore integration tool cache | |
| id: integration-tool-cache | |
| uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5 | |
| with: | |
| path: ${{ github.workspace }}/test/integration/tools/cache | |
| key: ${{ runner.os }}-integration-tools-cache-${{ hashFiles('test/integration/tools/cache.fingerprint') }} | |
| - name: (cache-hit) Load integration tool cache | |
| if: steps.integration-tool-cache.outputs.cache-hit == 'true' | |
| run: make integration-tools-load | |
| - name: Run integration tests | |
| run: make integration | |
| Cross-Platform-Build-Test: | |
| # Note: changing this job name requires making the same update in the .github/workflows/release.yaml pipeline | |
| name: "Cross-platform build test" | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| - name: Bootstrap environment | |
| uses: ./.github/actions/bootstrap | |
| - name: Build examples across all supported OS/arch combinations | |
| run: .github/scripts/build.sh ./snapshot |