chore(deps): update step-security/harden-runner digest to dece111 #6957
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Upgrade Testing | |
| on: | |
| push: | |
| paths-ignore: | |
| - '**.md' | |
| - '**.svg' | |
| - '**.drawio' | |
| - '.spelling' | |
| pull_request: | |
| branches: | |
| - master | |
| # The specific activity types are listed here to include "labeled" and "unlabeled" | |
| # (which are not included by default for the "pull_request" trigger). | |
| types: [opened, synchronize, reopened, ready_for_review, labeled, unlabeled] | |
| paths-ignore: | |
| - '**.md' | |
| - '**.svg' | |
| - '**.drawio' | |
| - '.spelling' | |
| permissions: | |
| contents: read | |
| jobs: | |
| skip-check: | |
| runs-on: ubuntu-latest | |
| name: Skip the job? | |
| outputs: | |
| should_skip: ${{ steps.skip_check.outputs.should_skip }} | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@dece11172ed6b762b5421b294513d628edad7f7d | |
| with: | |
| egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs | |
| - id: skip_check | |
| uses: fkirc/skip-duplicate-actions@f54720a485d24225d7ee6918004908e5025fec19 | |
| with: | |
| skip_after_successful_duplicate: 'true' | |
| do_not_skip: '["workflow_dispatch", "schedule"]' | |
| upgrade-testing: | |
| runs-on: ubuntu-22.04 | |
| needs: skip-check | |
| if: ${{ needs.skip-check.outputs.should_skip != 'true' }} && !contains( github.event.pull_request.labels.*.name, 'renovate') | |
| steps: | |
| - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 | |
| with: | |
| fetch-depth: 0 | |
| - uses: actions/setup-go@bfd2fb341f32be7281829126376a12a780ca79fc | |
| with: | |
| go-version: 1.19.1 | |
| - name: Build artifacts | |
| uses: goreleaser/goreleaser-action@14707cd26fbb4b6c8abf03fb8ea4eb6c59711a62 | |
| with: | |
| version: v1.9.2 | |
| args: release --rm-dist --skip-publish --skip-validate --snapshot --skip-sbom --skip-sign | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Create edgeDNS k3s Cluster | |
| uses: AbsaOSS/k3d-action@4e8b3239042be1dc0aed6c5eb80c13b18200fc79 | |
| with: | |
| cluster-name: "edgedns" | |
| args: -c k3d/edge-dns.yaml | |
| - name: Create 1st k3s Cluster | |
| uses: AbsaOSS/k3d-action@4e8b3239042be1dc0aed6c5eb80c13b18200fc79 | |
| with: | |
| cluster-name: "test-gslb1" | |
| args: -c k3d/test-gslb1.yaml | |
| - name: Create 2nd k3s Cluster | |
| uses: AbsaOSS/k3d-action@4e8b3239042be1dc0aed6c5eb80c13b18200fc79 | |
| with: | |
| cluster-name: "test-gslb2" | |
| args: -c k3d/test-gslb2.yaml | |
| - name: K8GB deploy stable version | |
| run: make deploy-stable-version list-running-pods | |
| - name: K8GB deploy test version | |
| run: make deploy-test-version list-running-pods | |
| - name: Run Terratest | |
| run: | | |
| mkdir -p ${{ github.workspace }}/tmp/terratest | |
| set -o pipefail | |
| make terratest | tee ${{ github.workspace }}/tmp/terratest/all.log | |
| echo "::endgroup::" | |
| - name: Print debug info | |
| if: always() | |
| uses: ./.github/actions/print-debug | |
| - uses: actions/upload-artifact@694cdabd8bdb0f10b2cea11669e1bf5453eed0a6 | |
| if: always() | |
| with: | |
| name: terratest-logs | |
| path: ${{ github.workspace }}/tmp/terratest |