Skip to content

Bump the actions group across 1 directory with 3 updates #399

Bump the actions group across 1 directory with 3 updates

Bump the actions group across 1 directory with 3 updates #399

Workflow file for this run

# SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors
# SPDX-License-Identifier: Apache-2.0
---
name: Go Tests (sourcetool)
on:
pull_request:
branches:
- main
permissions: {}
jobs:
go-versions:
runs-on: ubuntu-latest
permissions:
contents: read
outputs:
latest: ${{ steps.go-versions.outputs.GO_VERSION_STABLE }}
previous: ${{ steps.go-versions.outputs.GO_VERSION_PREVIOUS }}
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- uses: carabiner-dev/actions/go/versions@94f29392187fe5082d1195a7d4cae3a7ddf09d9c # v1.2.1
id: go-versions
unit-test:
needs: go-versions
runs-on: ubuntu-latest
permissions:
contents: read
strategy:
matrix:
go-version:
- ${{ needs.go-versions.outputs.latest }}
- ${{ needs.go-versions.outputs.previous }}
steps:
- name: Checkout code
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Set up Go
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
with:
go-version: ${{ matrix.go-version }}
check-latest: true
cache: false
- name: Run Go tests
run: |
go test -v ./...
test:
needs: [unit-test, verify]
runs-on: ubuntu-latest
steps:
- run: echo "All tests passed"
verify:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout code
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- uses: carabiner-dev/actions/go/versions@94f29392187fe5082d1195a7d4cae3a7ddf09d9c # v1.2.1
id: go-versions
- name: Set up Go
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
with:
go-version: ${{ steps.go-versions.outputs.GO_VERSION_STABLE }}
check-latest: true
cache: false
- name: Setup Buf
uses: bufbuild/buf-setup-action@a47c93e0b1648d5651a065437926377d060baa99 # v1.50.0
- name: Setup protoc
uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # @v3.0.0
- name: Check generated fakes
run: |
hack/verify-fakes.sh
- name: Check protobuf generated code
run: |
go install google.golang.org/protobuf/cmd/protoc-gen-go@latest
hack/verify-protos.sh