fix(deps): update module google.golang.org/grpc [security] #5384
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: PR OATS test | |
| on: | |
| push: | |
| branches: ["main", "release-*"] | |
| pull_request: | |
| branches: ["main", "release-*"] | |
| permissions: | |
| contents: read | |
| jobs: | |
| test-matrix: | |
| name: "Build oats matrix" | |
| runs-on: ubuntu-x64-small | |
| outputs: | |
| matrix: ${{ steps.build-matrix.outputs.matrix }} | |
| steps: | |
| - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: build matrix | |
| id: build-matrix | |
| run: | | |
| echo -n "matrix=" >> $GITHUB_OUTPUT | |
| make oats-integration-test-matrix-json >> $GITHUB_OUTPUT | |
| test: | |
| name: ${{ matrix.basename }} | |
| needs: test-matrix | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: ${{ fromJson(needs.test-matrix.outputs.matrix) }} | |
| # Set restrictive permissions at workflow level | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| # required for CODECOV token | |
| id-token: write | |
| checks: write | |
| # Required for uploading artifacts | |
| actions: write | |
| steps: | |
| - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Go | |
| uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 | |
| with: | |
| go-version-file: "go.mod" | |
| cache: false | |
| - name: Run oats tests | |
| env: | |
| MATRIX_BASENAME: ${{ matrix.basename }} | |
| run: make oats-test-$MATRIX_BASENAME | |
| - name: Upload oats test logs | |
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | |
| if: always() | |
| with: | |
| name: Oats test logs - ${{ matrix.basename }} | |
| path: test/oats/${{ matrix.basename }}/build/* | |
| - name: Process coverage data | |
| run: make itest-coverage-data | |
| - id: get-codecov-token | |
| uses: grafana/shared-workflows/actions/get-vault-secrets@9f37f656e063f0ad0b0bfc38d49894b57d363936 # get-vault-secrets/v1.2.1 | |
| continue-on-error: true | |
| with: | |
| # Secrets placed in the ci/repo/grafana/beyla/codecov path in Vault | |
| repo_secrets: | | |
| CODECOV_TOKEN=codecov:token | |
| - name: Report coverage | |
| uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1 | |
| with: | |
| files: ./testoutput/itest-covdata.txt | |
| flags: oats-test |