checks.yaml

name: Checks

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

permissions:
  contents: read

jobs:
  Checks:

    runs-on: ubuntu-latest

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
        with:
          egress-policy: audit
          disable-telemetry: true

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Setup Go environment
        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
        with:
          cache: true
          go-version-file: go.mod
          cache-dependency-path: '**/go.sum'

      - name: Check go versions
        uses: enterprise-contract/github-workflows/golang-version-check@main

      - name: Test
        run: make test

      - name: Upload unit test coverage report
        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
        with:
          files: ./cover.out
          flags: controller

      - name: Upload api test coverage report
        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
        with:
          files: ./api_cover.out
          flags: api

      - name: Upload schema test coverage report
        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
        with:
          files: ./schema_cover.out
          flags: schema

      # If enterprisecontractpolicy_types.go is updated without a corresponding change to the crd
      # an uncommitted change can show.
      - name: Check for uncommitted changes
        run: |
          if ! git diff --exit-code -s; then
            for f in $(git diff --exit-code --name-only); do
              echo "::error file=$f,line=1,col=1,endColumn=1::File was modified in build"
            done
            exit 1
          fi