feat(bearer): configure scanning and reporting settings #209
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Lint and Testing | |
on: | |
push: | |
pull_request: | |
jobs: | |
lint: | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout repository | |
uses: actions/checkout@v4 | |
- name: Setup go | |
uses: actions/setup-go@v5 | |
with: | |
go-version-file: go.mod | |
check-latest: true | |
- name: Setup golangci-lint | |
uses: golangci/golangci-lint-action@v6 | |
with: | |
version: latest | |
args: --verbose | |
- uses: hadolint/[email protected] | |
name: hadolint for Dockerfile | |
with: | |
dockerfile: docker/Dockerfile | |
# This step uses the Bearer GitHub Action to scan for sensitive data in the codebase. | |
# The 'uses' keyword specifies the action to be used, in this case, 'bearer/bearer-action' at version 'v2'. | |
# The 'with' keyword provides input parameters for the action: | |
# - 'diff: true' indicates that the action should only scan the changes in the current pull request or commit. | |
- name: Bearer | |
uses: bearer/bearer-action@v2 | |
with: | |
diff: true | |
testing: | |
runs-on: ubuntu-latest | |
container: golang:1.22-alpine | |
steps: | |
- name: Checkout repository | |
uses: actions/checkout@v4 | |
- name: setup sshd server | |
run: | | |
apk add git make curl perl bash build-base zlib-dev ucl-dev | |
make ssh-server | |
- name: testing | |
run: | | |
make test | |
- name: Upload coverage to Codecov | |
uses: codecov/codecov-action@v4 |