build.yml

name: Build

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

jobs:

  build:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3

    - name: Install asdf dependencies
      uses: asdf-vm/actions/install@v2

    - name: Build
      run: go build -v ./...

  test:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
    - name: Install asdf dependencies
      uses: asdf-vm/actions/install@v2
    - name: Test
      run: go test -v ./...

  integration-test:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
    - name: Install asdf dependencies
      uses: asdf-vm/actions/install@v2
    - name: Scan Container Image
      id: scan
      continue-on-error: true
      uses: Azure/container-scan@v0.1
      with:
        image-name: "busybox:latest"
    - name: Convert Scan Report to SARIF
      if: ${{ always() }}
      run: |
        go run cmd/container-scan-to-sarif/main.go \
          -input "${{ steps.scan.outputs.scan-report-path }}" \
        | tee scan.sarif
    - name: Upload SARIF report to GitHub Security tab
      uses: github/codeql-action/upload-sarif@v2
      if: ${{ always() }}
      with:
        sarif_file: scan.sarif

  goreleaser:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - name: Install asdf dependencies
        uses: asdf-vm/actions/install@v2
      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v4
        with:
          distribution: goreleaser
          version: latest
          args: release --rm-dist --snapshot --skip-sign
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}