diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 00000000..669333ec --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,20 @@ +# Dependency Review Action +# +# This Action will scan dependency manifest files that change as part of a Pull Reqest, surfacing known-vulnerable versions of the packages declared or updated in the PR. Once installed, if the workflow run is marked as required, PRs introducing known-vulnerable packages will be blocked from merging. +# +# Source repository: https://github.com/actions/dependency-review-action +# Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement +name: 'Dependency Review' +on: [pull_request] + +permissions: + contents: read + +jobs: + dependency-review: + runs-on: ubuntu-latest + steps: + - name: 'Checkout Repository' + uses: actions/checkout@v3 + - name: 'Dependency Review' + uses: actions/dependency-review-action@v1 \ No newline at end of file diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 617f2d98..abee207a 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -1,13 +1,11 @@ name: Lint on: push: - tags: - - v* branches: - - master - main - feature/* pull_request: + branches: [ main ] permissions: contents: read # Optional: allow read access to pull request. Use with `only-new-issues` option. @@ -15,9 +13,10 @@ permissions: jobs: golangci: strategy: + max-parallel: 6 matrix: go: [1.17, 1.18, 1.19] - os: [macos-latest, windows-latest] + os: [ubuntu-latest, macos-latest, windows-latest] name: lint runs-on: ${{ matrix.os }} steps: @@ -29,7 +28,7 @@ jobs: uses: golangci/golangci-lint-action@v3 with: # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version. - version: v1.49 + version: v1.51.2 # Optional: working directory, useful for monorepos # working-directory: somedir diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index dc9d3921..3993c314 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -11,9 +11,9 @@ jobs: test: strategy: - max-parallel: 3 + max-parallel: 6 matrix: - go-version: [1.16.x, 1.17.x, 1.18.x] + go-version: [1.17, 1.18, 1.19] platform: [ubuntu-latest, macos-latest, windows-latest] runs-on: ${{ matrix.platform }}