Update github/codeql-action action to v3.27.0 #2873
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Continuous Integration | |
| on: | |
| push: | |
| branches: | |
| - main | |
| tags: | |
| - "v[0-9]+.[0-9]+.[0-9]+" | |
| pull_request: | |
| branches: | |
| - main | |
| schedule: | |
| - cron: "0 5 * * *" # runs every day at 5am UTC | |
| merge_group: | |
| types: | |
| - checks_requested | |
| defaults: | |
| run: | |
| shell: bash | |
| concurrency: | |
| group: ${{ github.ref_name }}-ci | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| unit-test: | |
| name: Unit Test | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| go-version: ["1.21", "1.22", stable] | |
| steps: | |
| - name: Checkout Repository | |
| uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 | |
| - name: Setup Golang Environment | |
| uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 | |
| with: | |
| go-version: ${{ matrix.go-version }} | |
| - name: Run Unit Tests | |
| run: make unit-test | |
| build: | |
| name: Build Client | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: write | |
| issues: write | |
| if: ${{ github.event.repository.fork == false }} | |
| steps: | |
| - name: Checkout Repository | |
| uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 | |
| - name: Switch Repository (Nightly) | |
| if: (github.event_name == 'schedule') | |
| run: | | |
| sed -i 's|pkgs.nginx.com|pkgs-test.nginx.com|g' docker/Dockerfile | |
| sed -i '16d' docker/Dockerfile | |
| sed -i "17i sed -i 's|pkgs|pkgs-test|g' /etc/apt/apt.conf.d/90pkgs-nginx" docker/Dockerfile | |
| sed -i 's|deb https|deb [trusted=yes] https|g' docker/Dockerfile | |
| sed -i 's|\${NGINX_PLUS_VERSION}/||g' docker/Dockerfile | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1 | |
| - name: Build Plus Docker Image | |
| uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0 | |
| with: | |
| file: docker/Dockerfile | |
| tags: nginx-plus | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| load: true | |
| secrets: | | |
| "nginx-repo.crt=${{ secrets.NGINX_CRT }}" | |
| "nginx-repo.key=${{ secrets.NGINX_KEY }}" | |
| - name: Test Client | |
| run: docker compose up test --exit-code-from test | |
| - name: Test Client No Stream | |
| run: docker compose up test-no-stream --exit-code-from test-no-stream | |
| - name: Create/Update Draft | |
| uses: lucacome/draft-release@5d29432a46bff6c122cd4b07a1fb94e1bb158d34 # v1.1.1 | |
| id: release-notes | |
| with: | |
| minor-label: "enhancement" | |
| major-label: "change" | |
| publish: ${{ github.ref_type == 'tag' }} | |
| collapse-after: 50 | |
| if: ${{ github.event_name == 'push' }} | |
| - name: Setup Golang Environment | |
| uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 | |
| with: | |
| go-version: stable | |
| if: ${{ github.ref_type == 'tag' }} | |
| - name: Run GoReleaser | |
| uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0 | |
| with: | |
| version: v2.4.4 # renovate: datasource=github-tags depName=goreleaser/goreleaser | |
| args: release --clean | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK_COMMUNITY }} | |
| if: ${{ github.ref_type == 'tag' }} |