Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions .github/workflows/build-test.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,26 +15,26 @@ jobs:
name: "Build Binary"
runs-on: "depot-ubuntu-latest-arm"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
- uses: "authzed/actions/setup-go@main"
- uses: "authzed/actions/go-build@main"

image-build:
name: "Build Container Image"
runs-on: "depot-ubuntu-latest-arm"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
- uses: "authzed/actions/docker-build@main"

ensure-docs-uptodate:
name: "Ensure Docs are up to date"
runs-on: "depot-ubuntu-latest-arm"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
- uses: "authzed/actions/setup-go@main"
- name: "Generate docs"
run: "go run mage.go gen:docs"
- uses: "chainguard-dev/actions/nodiff@8bb24c24be6871bee44f19be55ea11e3b2aea3dd" # main
- uses: "chainguard-dev/actions/nodiff@f0be69916b439d0fcced2451b23d0f27cd46d545" # main
with:
path: ""
fixup-command: "mage gen:docs"
Expand All @@ -47,12 +47,12 @@ jobs:
os: ["depot-ubuntu-latest-arm"] # TODO(miparnisari): add "windows-latest" after fixing the tests

steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
- uses: "authzed/actions/setup-go@main"
- name: "Unit tests with coverage"
run: "go run mage.go test:runWithCoverage"
- name: "Upload coverage to Codecov"
uses: "codecov/codecov-action@v6.0.0"
uses: "codecov/codecov-action@v7.0.0"
with:
files: "./coverage.txt"
verbose: true
Expand All @@ -63,7 +63,7 @@ jobs:
name: "WASM Tests"
runs-on: "depot-ubuntu-24.04-4"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
- uses: "authzed/actions/setup-go@main"
with:
# NOTE: This needs to match the toolchain version, or else
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/docs.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,15 +20,15 @@ jobs:
name: "Generate & Sync Documentation"
runs-on: "ubuntu-latest"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
- uses: "authzed/actions/setup-go@main"
- uses: "authzed/actions/setup-mage@main"

- name: "Generate Documentation"
run: "mage gen:docsForPublish"

- name: "Checkout docs repository"
uses: "actions/checkout@v6"
uses: "actions/checkout@v7"
with:
token: "${{ secrets.GITHUB_TOKEN }}"
repository: "${{ env.DOCS_REPO }}"
Expand Down Expand Up @@ -71,7 +71,7 @@ jobs:
GH_TOKEN: "${{ secrets.AUTHZEDAPPROVER_REPO_SCOPED_TOKEN }}"
- name: "Notify in Slack if failure"
if: "${{ failure() }}"
uses: "slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95" # v3.0.1
uses: "slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c" # v3.0.3
with:
webhook: "${{ secrets.SLACK_BUILDS_WEBHOOK_URL }}"
webhook-type: "incoming-webhook"
Expand Down
16 changes: 8 additions & 8 deletions .github/workflows/lint.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ jobs:
name: "Lint Go"
runs-on: "depot-ubuntu-latest-arm"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
- uses: "authzed/actions/setup-go@main"
- uses: "authzed/actions/gofumpt@main"
- uses: "authzed/actions/go-mod-tidy@main"
Expand All @@ -26,7 +26,7 @@ jobs:
name: "Lint YAML & Markdown"
runs-on: "depot-ubuntu-latest"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
- uses: "authzed/actions/yaml-lint@main"
- uses: "authzed/actions/markdown-lint@main"
with:
Expand All @@ -44,16 +44,16 @@ jobs:
matrix:
language: ["go"]
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
- uses: "authzed/actions/setup-go@main"
- uses: "authzed/actions/codeql@main"

trivy-fs:
name: "Analyze FS with Trivy"
runs-on: "depot-ubuntu-latest"
steps:
- uses: "actions/checkout@v6"
- uses: "aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1" # For https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23
- uses: "actions/checkout@v7"
- uses: "aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25" # For https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23
with:
scan-type: "fs"
ignore-unfixed: true
Expand All @@ -68,7 +68,7 @@ jobs:
name: "Analyze Release Image with Trivy"
runs-on: "depot-ubuntu-latest"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
- uses: "authzed/actions/setup-go@main"
# Workaround until goreleaser release supports --single-target
# makes the build faster by not building everything
Expand Down Expand Up @@ -103,5 +103,5 @@ jobs:
runs-on: "depot-ubuntu-24.04-small"
if: "github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened' || github.event.action == 'edited')"
steps:
- uses: "actions/checkout@v6"
- uses: "webiny/action-conventional-commits@v1.3.1"
- uses: "actions/checkout@v7"
- uses: "webiny/action-conventional-commits@v1.4.2"
4 changes: 2 additions & 2 deletions .github/workflows/release-windows.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
release-windows:
runs-on: "windows-latest"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
with:
fetch-depth: 0
- uses: "authzed/actions/setup-go@main"
Expand All @@ -37,7 +37,7 @@ jobs:
CHOCOLATEY_API_KEY: "${{ secrets.CHOCOLATEY_API_KEY }}"
- name: "Notify in Slack if failure"
if: "${{ failure() }}"
uses: "slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95" # v3.0.1
uses: "slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c" # v3.0.3
with:
webhook: "${{ secrets.SLACK_BUILDS_WEBHOOK_URL }}"
webhook-type: "incoming-webhook"
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ jobs:
github:
runs-on: "macos-latest"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
with:
fetch-depth: 0
- name: "Install cross-compilers"
Expand All @@ -32,7 +32,7 @@ jobs:
GEMFURY_PUSH_TOKEN: "${{ secrets.GEMFURY_PUSH_TOKEN }}"
- name: "Notify in Slack if failure"
if: "${{ failure() }}"
uses: "slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95" # v3.0.1
uses: "slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c" # v3.0.3
with:
webhook: "${{ secrets.SLACK_BUILDS_WEBHOOK_URL }}"
webhook-type: "incoming-webhook"
Expand All @@ -49,7 +49,7 @@ jobs:
docker:
runs-on: "depot-ubuntu-latest-arm"
steps:
- uses: "actions/checkout@v6"
- uses: "actions/checkout@v7"
with:
fetch-depth: 0
- uses: "authzed/actions/docker-login@main"
Expand All @@ -72,7 +72,7 @@ jobs:
GORELEASER_KEY: "${{ secrets.GORELEASER_KEY }}"
- name: "Notify in Slack if failure"
if: "${{ failure() }}"
uses: "slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95" # v3.0.1
uses: "slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c" # v3.0.3
with:
webhook: "${{ secrets.SLACK_BUILDS_WEBHOOK_URL }}"
webhook-type: "incoming-webhook"
Expand Down
Loading