ci.yaml

name: ci
on:
  pull_request:
    branches:
      - main
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
jobs:
  test:
    name: Test
    runs-on: ubuntu-latest
    env:
      VERBOSE: 1
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Set Helm
        uses: azure/setup-helm@v4.2.0
        with:
          version: v3.12.1
      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod
          cache: true
      - name: golangci-lint
        uses: golangci/golangci-lint-action@v6
        with:
          args: --timeout 5m0s
          skip-cache: true
      - name: Check code
        run: make check
      - name: Run Gosec Security Scanner
        uses: securego/gosec@v2.21.4
        with:
          args: ./...
      - name: Bearer
        uses: bearer/bearer-action@v2
        with:
          scanner: secrets,sast
          diff: true
      - name: Run tests
        run: make test-all
      - name: Install plugin
        run: make install
      - name: Run plugin
        run: helm schema -help
      - name: Upload coverage reports to Codecov
        uses: codecov/codecov-action@v5
        with:
          flags: unittests
          token: ${{ secrets.CODECOV_TOKEN }}