|
1 | | -name: Maintenance |
2 | | - |
3 | | -on: |
4 | | - schedule: |
5 | | - - cron: "0 10 * * 1" |
6 | | - workflow_dispatch: |
7 | | - |
8 | | -permissions: |
9 | | - contents: read |
10 | | - |
11 | | -jobs: |
12 | | - dependency-drift: |
13 | | - name: Dependency Drift |
14 | | - runs-on: ubuntu-latest |
15 | | - |
16 | | - steps: |
17 | | - - name: Checkout code |
18 | | - uses: actions/checkout@v4 |
19 | | - |
20 | | - - name: Checkout cimis-tsdb |
21 | | - uses: actions/checkout@v4 |
22 | | - with: |
23 | | - repository: dl-alexandre/cimis-tsdb |
24 | | - token: ${{ secrets.GH_PAT }} |
25 | | - path: _deps/cimis-tsdb |
26 | | - |
27 | | - - name: Set up Go |
28 | | - uses: actions/setup-go@v5 |
29 | | - with: |
30 | | - go-version: "1.25.x" |
31 | | - cache: true |
32 | | - |
33 | | - - name: Collect dependency update report |
34 | | - run: | |
35 | | - mkdir -p .artifacts/maintenance |
36 | | - go list -u -m all > .artifacts/maintenance/dependency-updates.txt |
37 | | -
|
38 | | - - name: Upload dependency report |
39 | | - uses: actions/upload-artifact@v4 |
40 | | - with: |
41 | | - name: cimis-dependency-updates |
42 | | - path: .artifacts/maintenance/dependency-updates.txt |
43 | | - retention-days: 30 |
44 | | - |
45 | | - security-summary: |
46 | | - name: Security Summary |
47 | | - runs-on: ubuntu-latest |
48 | | - |
49 | | - steps: |
50 | | - - name: Checkout code |
51 | | - uses: actions/checkout@v4 |
52 | | - |
53 | | - - name: Checkout cimis-tsdb |
54 | | - uses: actions/checkout@v4 |
55 | | - with: |
56 | | - repository: dl-alexandre/cimis-tsdb |
57 | | - token: ${{ secrets.GH_PAT }} |
58 | | - path: _deps/cimis-tsdb |
59 | | - |
60 | | - - name: Set up Go |
61 | | - uses: actions/setup-go@v5 |
62 | | - with: |
63 | | - go-version: "1.25.x" |
64 | | - cache: true |
65 | | - |
66 | | - - name: Run govulncheck summary |
67 | | - run: | |
68 | | - mkdir -p .artifacts/maintenance |
69 | | - go install golang.org/x/vuln/cmd/govulncheck@latest |
70 | | - govulncheck -json ./... > .artifacts/maintenance/govulncheck.json || true |
71 | | -
|
72 | | - - name: Upload vulnerability summary |
73 | | - uses: actions/upload-artifact@v4 |
74 | | - with: |
75 | | - name: cimis-vuln-summary |
76 | | - path: .artifacts/maintenance/govulncheck.json |
77 | | - retention-days: 30 |
78 | | - |
79 | | - coverage-trend: |
80 | | - name: Coverage Trend |
81 | | - runs-on: ubuntu-latest |
82 | | - |
83 | | - steps: |
84 | | - - name: Checkout code |
85 | | - uses: actions/checkout@v4 |
86 | | - |
87 | | - - name: Checkout cimis-tsdb |
88 | | - uses: actions/checkout@v4 |
89 | | - with: |
90 | | - repository: dl-alexandre/cimis-tsdb |
91 | | - token: ${{ secrets.GH_PAT }} |
92 | | - path: _deps/cimis-tsdb |
93 | | - |
94 | | - - name: Set up Go |
95 | | - uses: actions/setup-go@v5 |
96 | | - with: |
97 | | - go-version: "1.25.x" |
98 | | - cache: true |
99 | | - |
100 | | - - name: Collect coverage snapshot |
101 | | - run: | |
102 | | - mkdir -p .artifacts/coverage |
103 | | - go test -coverprofile=.artifacts/coverage/coverage.out ./... |
104 | | - go tool cover -func=.artifacts/coverage/coverage.out > .artifacts/coverage/coverage-summary.txt |
105 | | -
|
106 | | - - name: Upload coverage snapshot |
107 | | - uses: actions/upload-artifact@v4 |
108 | | - with: |
109 | | - name: cimis-coverage-snapshot |
110 | | - path: .artifacts/coverage/ |
111 | | - retention-days: 30 |
0 commit comments