-
Notifications
You must be signed in to change notification settings - Fork 1
111 lines (91 loc) · 2.63 KB
/
lint.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
name: Lint
on:
workflow_dispatch:
push:
branches:
- main
tags:
- '*'
pull_request:
types: [opened, synchronize, reopened, ready_for_review]
branches:
- 'main'
- 'release/**'
jobs:
spotless:
runs-on: ubuntu-latest
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
steps:
- uses: actions/checkout@v4
- name: Set up JDK
uses: actions/setup-java@v3
with:
distribution: 'temurin'
java-version: '21'
- name: Check with Spotless
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
uses: gradle/gradle-build-action@v3
with:
cache-disabled: false
# Cache storage space is limited for GitHub actions
cache-read-only: ${{ github.ref != 'refs/heads/main' }}
arguments: spotlessCheck
detekt:
runs-on: ubuntu-latest
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
steps:
- uses: actions/checkout@v4
- name: Set up JDK
uses: actions/setup-java@v3
with:
distribution: 'temurin'
java-version: '21'
- name: Check with Detekt
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
uses: gradle/gradle-build-action@v3
with:
cache-disabled: false
# Cache storage space is limited for GitHub actions
cache-read-only: ${{ github.ref != 'refs/heads/main' }}
arguments: detekt
- name: Upload SARIF reports to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
if: ${{ always() }}
with:
sarif_file: 'build/reports/detekt/sarif/'
helm-lint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up Helm
uses: azure/[email protected]
with:
version: v3.6.0
- name: Lint Helm Chart (api) with helm
run: helm lint api/kubernetes/helm-chart
kube-linter:
runs-on: ubuntu-latest
strategy:
matrix:
chart:
- helm-chart
steps:
- uses: actions/checkout@v4
- run: mkdir -p api/kubernetes/.sarif
- name: Scan '${{ matrix.chart }}' Chart with kube-linter
uses: stackrox/[email protected]
with:
directory: api/kubernetes/${{ matrix.chart }}
config: api/kubernetes/.kube-linter.yaml
format: sarif
output-file: api/kubernetes/.sarif/${{ matrix.chart }}.sarif
version: 0.2.5
- name: Upload SARIF file
if: ${{ always() }}
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: api/kubernetes/.sarif/${{ matrix.chart }}.sarif