feat: Update KubeArmor to use OCI hooks instead of depending on container runtime socket #4730
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci-test-go | |
| on: | |
| push: | |
| branches: [main] | |
| paths: | |
| - "KubeArmor/**" | |
| - "tests/**" | |
| - "protobuf/**" | |
| - ".github/workflows/ci-test-go.yml" | |
| - "pkg/KubeArmorOperator/**" | |
| pull_request: | |
| branches: [main] | |
| paths: | |
| - "KubeArmor/**" | |
| - "tests/**" | |
| - "protobuf/**" | |
| - ".github/workflows/ci-test-go.yml" | |
| - "pkg/KubeArmorOperator/**" | |
| # Declare default permissions as read only. | |
| permissions: read-all | |
| jobs: | |
| go-fmt: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: 'KubeArmor/go.mod' | |
| - name: Check gofmt | |
| run: make gofmt | |
| working-directory: KubeArmor | |
| go-lint: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: 'KubeArmor/go.mod' | |
| - name: Run Revive Action on KubeArmor | |
| uses: morphy2k/revive-action@v2 | |
| with: | |
| path: "./KubeArmor/..." | |
| go-lint-tests: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: 'KubeArmor/go.mod' | |
| - name: Run Revive Action on KubeArmor tests | |
| uses: morphy2k/revive-action@v2 | |
| with: | |
| path: "./tests/..." | |
| go-sec: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: 'KubeArmor/go.mod' | |
| - name: Run Gosec Security Scanner | |
| run: make gosec | |
| working-directory: KubeArmor | |
| go-vuln: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: 'KubeArmor/go.mod' | |
| - name: Run govulncheck | |
| run: make scan | |
| working-directory: KubeArmor | |
| go-test: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: 'KubeArmor/go.mod' | |
| - name: Run go test on the KubeArmor/KubeArmor directory | |
| run: go test ./... | |
| working-directory: KubeArmor | |
| license: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Check License Header | |
| uses: apache/skywalking-eyes@ed436a5593c63a25f394ea29da61b0ac3731a9fe | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |