Skip to content

Bump the gomod group across 1 directory with 5 updates #419

Bump the gomod group across 1 directory with 5 updates

Bump the gomod group across 1 directory with 5 updates #419

Workflow file for this run

# SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors
# SPDX-License-Identifier: Apache-2.0
---
name: Go Tests (sourcetool)
on:
pull_request:
branches:
- main
permissions: {}
jobs:
go-versions:
runs-on: ubuntu-latest
permissions:
contents: read
outputs:
latest: ${{ steps.go-versions.outputs.GO_VERSION_STABLE }}
previous: ${{ steps.go-versions.outputs.GO_VERSION_PREVIOUS }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- uses: carabiner-dev/actions/go/versions@2a4b2cd115ede14629b03ef7e77586d3269d4c72 # v1.2.3
id: go-versions
unit-test:
needs: go-versions
runs-on: ubuntu-latest
permissions:
contents: read
strategy:
matrix:
go-version:
- ${{ needs.go-versions.outputs.latest }}
- ${{ needs.go-versions.outputs.previous }}
steps:
- name: Checkout code
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Set up Go
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
with:
go-version: ${{ matrix.go-version }}
check-latest: true
cache: false
- name: Run Go tests
run: |
go test -v ./...
test:
needs: [unit-test, verify]
runs-on: ubuntu-latest
steps:
- run: echo "All tests passed"
verify:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout code
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- uses: carabiner-dev/actions/go/versions@2a4b2cd115ede14629b03ef7e77586d3269d4c72 # v1.2.3
id: go-versions
- name: Set up Go
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
with:
go-version: ${{ steps.go-versions.outputs.GO_VERSION_STABLE }}
check-latest: true
cache: false
- name: Setup Buf
uses: bufbuild/buf-setup-action@a47c93e0b1648d5651a065437926377d060baa99 # v1.50.0
- name: Setup protoc
uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # @v3.0.0
- name: Check generated fakes
run: |
hack/verify-fakes.sh
- name: Check protobuf generated code
run: |
go install google.golang.org/protobuf/cmd/protoc-gen-go@latest
hack/verify-protos.sh