Bump github/codeql-action from 3.25.7 to 3.26.2 #1600
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Basic e2e test | |
on: | |
pull_request: | |
branches: | |
- 'main' | |
jobs: | |
e2e: | |
strategy: | |
fail-fast: false | |
matrix: | |
platform: | |
- ubuntu-latest | |
- windows-latest | |
name: e2e ${{ matrix.platform }} | |
runs-on: ${{ matrix.platform }} | |
steps: | |
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 | |
- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 | |
with: | |
go-version-file: 'go.mod' | |
check-latest: true | |
- name: Build and run ko container | |
env: | |
KO_DOCKER_REPO: ko.local | |
shell: bash | |
run: | | |
set -o errexit | |
set -o nounset | |
set -o pipefail | |
set -x | |
# Check that building without push prints the tag (and sha) | |
KO_DOCKER_REPO="" go run ./ build --push=false ./test | grep ":latest@sha256:" | |
KO_DOCKER_REPO="" go run ./ build --push=false -t test ./test | grep ":test@sha256:" | |
KO_DOCKER_REPO="" go run ./ build --push=false -t test --tag-only ./test | grep ":test$" | |
# Check that using sbom-dir works. | |
KO_DOCKER_REPO="" go run ./ build -t test --push=false --sbom-dir ./sbom-data ./test | |
jq . ./sbom-data/test-linux-amd64.spdx.json | |
# Check that using sbom-dir works for multi-arch | |
KO_DOCKER_REPO="" go run ./ build --platform=linux/amd64,linux/arm64 -t test --push=false --sbom-dir ./sbom-data2 ./test | |
jq . ./sbom-data2/test-index.spdx.json | |
jq . ./sbom-data2/test-linux-amd64.spdx.json | |
jq . ./sbom-data2/test-linux-arm64.spdx.json | |
export PLATFORM=$(go env GOOS)/$(go env GOARCH) | |
if [[ "${{ matrix.platform }}" == "windows-latest" ]]; then | |
OSVERSION="10.0.20348" | |
PLATFORM=${PLATFORM}:${OSVERSION} | |
export KO_DEFAULTBASEIMAGE=mcr.microsoft.com/windows/nanoserver:ltsc2022 | |
else | |
# Explicitly test multiple platform builds (a subset of what's in the base!) | |
export PLATFORM=${PLATFORM},linux/arm64 | |
fi | |
echo platform is ${PLATFORM} | |
# Build and run the ko binary, which should be runnable. | |
docker run $(go run ./ build ./ --platform=${PLATFORM} --preserve-import-paths) version | |
# Build and run the test/ binary, which should log "Hello there" served from KO_DATA_PATH | |
testimg=$(go run ./ build ./test --platform=${PLATFORM} --preserve-import-paths) | |
docker run ${testimg} --wait=false 2>&1 | tee >(grep "Hello there") # Log all output too. | |
# Check that symlinks in kodata are chased. | |
# Skip this test on Windows. | |
if [[ "$RUNNER_OS" == "Linux" ]]; then | |
docker run ${testimg} --wait=false -f b | |
fi | |
# Check that using ldflags to set variables works. | |
cat > .ko.yaml << EOF | |
builds: | |
- id: test | |
main: ./test/ | |
ldflags: | |
- "-X main.version=${{ github.sha }}" | |
EOF | |
docker run $(go run ./ build ./test/ --platform=${PLATFORM}) --wait=false 2>&1 | grep "${{ github.sha }}" | |
# Check that --debug adds dlv to the image, and that dlv is runnable. | |
docker run --entrypoint="dlv" $(go run ./ build ./test/ --platform=${PLATFORM} --debug) version | grep "Delve Debugger" |