v13 Release tests first batch (#1416)

* test-suite: test external (remote) cluster scanning via kubeconfig secret

* migrate from cnquery/v12 to mql/v13

* refactor: replace golang-version environment variable with go-version-file in workflows

Author: slntopp

.github/env

@@ -1,4 +1,3 @@
-golang-version=1.25.5
 operator-sdk-version=v1.33.0
 MONDOO_ORG_MRN=//captain.api.mondoo.app/organizations/mondoo-operator-testing
 MONDOO_GQL_ENDPOINT=https://api.mondoo.com/query

.github/workflows/cloud-tests.yaml

@@ -70,7 +70,7 @@ jobs:
 
       - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
           cache: true
 
       - name: Get operator version
@@ -152,7 +152,7 @@ jobs:
 
       - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
           cache: true
 
       - name: Get operator version
@@ -232,7 +232,7 @@ jobs:
 
       - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
           cache: true
 
       - name: Get operator version

.github/workflows/helm-tests.yaml

@@ -29,7 +29,7 @@ jobs:
         run: cat ".github/env" >> $GITHUB_ENV
       - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
       - name: Build operator container image
         run: make docker-save
       - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
@@ -68,7 +68,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
 
       - name: Start minikube
         uses: medyagh/setup-minikube@aba8d5ff1666d19b9549133e3b92e70d4fc52cb7 # master

.github/workflows/integration-tests.yaml

@@ -37,7 +37,7 @@ jobs:
         run: cat ".github/env" >> $GITHUB_ENV
       - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
       - name: Build operator container image
         run: make docker-save
       - name: Generate manifests
@@ -85,7 +85,7 @@ jobs:
 
       - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
 
       - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         name: Download operator build artifact
@@ -147,7 +147,7 @@ jobs:
 
       - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
 
       - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         name: Download operator build artifact

.github/workflows/leftover-spaces-cleaner.yaml

@@ -18,7 +18,7 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
       with:
-        go-version: '1.24'
+        go-version-file: "go.mod"
 
     - name: Run leftover spaces cleanup
       run: go run cmd/test-space-cleaner/main.go

.github/workflows/lint.yaml

@@ -22,7 +22,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: ">=${{ env.golang-version }}"
+          go-version-file: "go.mod"
       - name: golangci-lint
         uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
         with:

.github/workflows/publish.yaml

@@ -55,7 +55,7 @@ jobs:
 
       - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
           cache: true
 
       # Install the cosign tool except on PR

.github/workflows/release-manifests.yaml

@@ -24,7 +24,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
       - name: Generate manifests
         run: make generate-manifests IMG='${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.RELEASE }}'
       - name: Release

.github/workflows/release.yaml

@@ -29,7 +29,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
 
       - name: Install yq
         run: |

.github/workflows/security-tests.yaml

@@ -30,7 +30,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: "${{ env.golang-version }}"
+          go-version-file: "go.mod"
           cache: false
       - name: Scan AWS terraform with Mondoo
         uses: mondoohq/actions/terraform-hcl@main