Configure dependabot for the release-0.16 branch #4148
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Linting | |
| on: | |
| pull_request: | |
| permissions: {} | |
| jobs: | |
| apply-suggestions-commits: | |
| name: 'No "Apply suggestions from code review" Commits' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Get PR commits | |
| id: 'get-pr-commits' | |
| uses: tim-actions/get-pr-commits@3efc1387ead42029a0d488ab98f24b7452dc3cde | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| - name: 'Verify no "Apply suggestions from code review" commits' | |
| uses: tim-actions/commit-message-checker-with-regex@094fc16ff83d04e2ec73edb5eaf6aa267db33791 | |
| with: | |
| commits: ${{ steps.get-pr-commits.outputs.commits }} | |
| pattern: '^(?!.*(apply suggestions from code review))' | |
| flags: 'i' | |
| error: 'Commits addressing code review feedback should typically be squashed into the commits under review' | |
| - name: 'Verify no "fixup!" commits' | |
| uses: tim-actions/commit-message-checker-with-regex@094fc16ff83d04e2ec73edb5eaf6aa267db33791 | |
| with: | |
| commits: ${{ steps.get-pr-commits.outputs.commits }} | |
| pattern: '^(?!fixup!)' | |
| flags: 'i' | |
| error: 'Fixup commits should be squashed into the commits under review' | |
| code-gen: | |
| name: Submariner K8s API Code Generation | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| - name: Run codegen | |
| run: make codegen | |
| - name: Ignore go.sum changes | |
| run: git checkout go.sum | |
| - name: Verify generated code matches committed code | |
| run: git add -A && git diff --staged --exit-code | |
| proto-gen: | |
| name: Protobuf Code Generation | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| - name: Recreate Protobuf files | |
| run: find pkg -name '*.pb.go' -delete -exec make {} \; | |
| - name: Ignore go.sum changes | |
| run: git checkout go.sum | |
| - name: Verify generated code matches committed code | |
| run: git add -A && git diff -I'^//' --staged --exit-code | |
| gitlint: | |
| name: Commit Message(s) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| with: | |
| fetch-depth: 0 | |
| - name: Run gitlint | |
| run: make gitlint | |
| golangci-lint: | |
| name: Go | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| - name: Run golangci-lint | |
| run: make golangci-lint | |
| licenses: | |
| name: Dependency Licenses | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| - name: Check the licenses | |
| run: make licensecheck | |
| markdown-link-check: | |
| name: Markdown Links (modified files) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| - name: Run markdown-link-check | |
| uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec | |
| with: | |
| config-file: ".markdownlinkcheck.json" | |
| check-modified-files-only: "yes" | |
| base-branch: ${{ github.base_ref }} | |
| markdownlint: | |
| name: Markdown | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| - name: Run markdownlint | |
| run: make markdownlint | |
| packagedoc-lint: | |
| name: Package Documentation | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| - name: Run packagedoc-lint | |
| run: make packagedoc-lint | |
| shellcheck: | |
| name: Shell | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| - name: Run shellcheck | |
| run: make shellcheck | |
| variant-analysis: | |
| name: Variant Analysis | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@86f3159a697a097a813ad9bfa0002412d97690a4 | |
| with: | |
| languages: go | |
| - name: Run CodeQL variant analysis | |
| uses: github/codeql-action/analyze@86f3159a697a097a813ad9bfa0002412d97690a4 | |
| - name: Show CodeQL scan SARIF report | |
| if: always() | |
| run: cat ../results/go.sarif | |
| vulnerability-scan: | |
| name: Vulnerability Scanning | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| - name: Run Anchore vulnerability scanner | |
| uses: anchore/scan-action@24fd7c9060f3c96848dd1929fac8d796fb5ae4b4 | |
| id: scan | |
| with: | |
| path: "." | |
| fail-build: true | |
| severity-cutoff: negligible | |
| - name: Show Anchore scan SARIF report | |
| if: always() | |
| run: cat ${{ steps.scan.outputs.sarif }} | |
| - name: Upload Anchore scan SARIF report | |
| if: always() | |
| uses: github/codeql-action/upload-sarif@00e563ead9f72a8461b24876bee2d0c2e8bd2ee8 | |
| with: | |
| sarif_file: ${{ steps.scan.outputs.sarif }} | |
| yaml-lint: | |
| name: YAML | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 | |
| - name: Run yamllint | |
| run: make yamllint |