mirror of
https://github.com/getsops/sops.git
synced 2026-02-05 12:45:21 +01:00
125 lines
3.9 KiB
YAML
125 lines
3.9 KiB
YAML
name: CLI
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
build:
|
|
name: Build and test ${{ matrix.os }} ${{ matrix.arch }}
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
os: [linux, darwin, windows]
|
|
arch: [amd64, arm64]
|
|
exclude:
|
|
- os: windows
|
|
arch: arm64
|
|
env:
|
|
VAULT_VERSION: "1.1.3"
|
|
VAULT_TOKEN: "root"
|
|
VAULT_ADDR: "http://127.0.0.1:8200"
|
|
steps:
|
|
- name: Set up Go 1.21
|
|
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
|
|
with:
|
|
go-version: '1.21'
|
|
id: go
|
|
|
|
- name: Check out code into the Go module directory
|
|
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
|
|
|
|
- uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
|
|
with:
|
|
path: ~/go/pkg/mod
|
|
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-go-
|
|
|
|
- name: Vendor Go Modules
|
|
run: make vendor
|
|
|
|
- name: Ensure clean working tree
|
|
run: git diff --exit-code
|
|
|
|
- name: Build Linux and Darwin
|
|
if: matrix.os != 'windows'
|
|
run: GOOS=${{ matrix.os }} GOARCH=${{ matrix.arch }} go build -o sops-${{ matrix.os }}-${{ matrix.arch }}-${{ github.sha }} -v ./cmd/sops
|
|
|
|
- name: Build Windows
|
|
if: matrix.os == 'windows'
|
|
run: GOOS=${{ matrix.os }} go build -o sops-${{ matrix.os }}-${{ github.sha }} -v ./cmd/sops
|
|
|
|
- name: Import test GPG keys
|
|
run: for i in 1 2 3 4 5; do gpg --import pgp/sops_functional_tests_key.asc && break || sleep 15; done
|
|
|
|
- name: Test
|
|
run: make test
|
|
|
|
- name: Upload artifact for Linux and Darwin
|
|
if: matrix.os != 'windows'
|
|
uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
|
|
with:
|
|
name: sops-${{ matrix.os }}-${{ matrix.arch }}-${{ github.sha }}
|
|
path: sops-${{ matrix.os }}-${{ matrix.arch }}-${{ github.sha }}
|
|
|
|
- name: Upload artifact for Windows
|
|
if: matrix.os == 'windows'
|
|
uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
|
|
with:
|
|
name: sops-${{ matrix.os }}-${{ github.sha }}
|
|
path: sops-${{ matrix.os }}-${{ github.sha }}
|
|
test:
|
|
name: Functional tests
|
|
runs-on: ubuntu-latest
|
|
needs: [build]
|
|
env:
|
|
VAULT_VERSION: "1.1.3"
|
|
VAULT_TOKEN: "root"
|
|
VAULT_ADDR: "http://127.0.0.1:8200"
|
|
steps:
|
|
- name: Check out code
|
|
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
|
|
|
|
# Rustup will detect toolchain version and profile from rust-toolchain.toml
|
|
# It will download and install the toolchain and components automatically
|
|
# and make them available for subsequent commands
|
|
- name: Install Rust toolchain
|
|
run: rustup show
|
|
|
|
- name: Show Rust version
|
|
run: cargo --version
|
|
|
|
- uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
|
with:
|
|
name: sops-linux-amd64-${{ github.sha }}
|
|
|
|
- name: Move SOPS binary
|
|
run: mv sops-linux-amd64-${{ github.sha }} ./functional-tests/sops
|
|
|
|
- name: Make SOPS binary executable
|
|
run: chmod +x ./functional-tests/sops
|
|
|
|
- name: Download Vault
|
|
run: curl -O "https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_linux_amd64.zip" && sudo unzip vault_${VAULT_VERSION}_linux_amd64.zip -d /usr/local/bin/
|
|
|
|
- name: Start Vault server
|
|
run: vault server -dev -dev-root-token-id="$VAULT_TOKEN" &
|
|
|
|
- name: Enable Vault KV
|
|
run: vault secrets enable -version=1 kv
|
|
|
|
- name: Import test GPG keys
|
|
run: for i in 1 2 3 4 5; do gpg --import pgp/sops_functional_tests_key.asc && break || sleep 15; done
|
|
|
|
- name: Run tests
|
|
run: cargo test
|
|
working-directory: ./functional-tests
|