Skip to content

build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 #555

build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3

build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 #555

Workflow file for this run

name: CI
on: [push, pull_request]
permissions:
contents: read
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
jobs:
tests:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Setup Go
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
with:
go-version-file: go.mod
- name: Cache go modules
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
with:
path: ~/go/pkg/mod
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
restore-keys: ${{ runner.os }}-go-
- name: Run unit tests
run: go test ./v2 -v -coverprofile=cov.out
- name: Run integration tests
run: go test ./internal/integration/v2 -v -coverpkg="github.com/pandatix/nvdapi/v2" -coverprofile=cov-tf.out
env:
API_KEY: ${{ secrets.API_KEY }}
if: github.event_name != 'pull_request'
- name: Merge cover profiles
run: |
go install github.com/wadey/gocovmerge@v0.0.0-20160331181800-b5bfa59ec0ad
gocovmerge cov.out cov-tf.out > cov.out
if: github.event_name != 'pull_request'
- name: Upload coverage to Coveralls
uses: shogo82148/actions-goveralls@e6875f831db61e6abffbd8df91a2eb6cd24b46c9 # v1.9.1
with:
path-to-profile: cov.out
lint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
with:
go-version-file: go.mod
- name: go-lint
uses: golangci/golangci-lint-action@1481404843c368bc19ca9406f87d6e0fc97bdcfd # v7.0.0