mirror of
https://github.com/go-task/task.git
synced 2026-07-03 01:18:48 +00:00
1ce604da1c
Move the govulncheck job from security.yml into ci.yml and add it to the ci-status gate so it shares the CI concurrency group and is covered by the single required check. Drop the now-redundant security.yml.
123 lines
3.5 KiB
YAML
123 lines
3.5 KiB
YAML
name: CI
|
|
|
|
on:
|
|
pull_request:
|
|
push:
|
|
tags:
|
|
- v*
|
|
branches:
|
|
- main
|
|
|
|
concurrency:
|
|
group: ci-${{ github.head_ref || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
build:
|
|
name: 🔨 Build (${{ matrix.go-version }})
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
go-version: [1.25.10, 1.26.x]
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: 📥 Checkout
|
|
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
|
|
|
- name: ⬇️ Setup Go
|
|
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
|
|
with:
|
|
go-version: ${{ matrix.go-version }}
|
|
|
|
- name: 🔨 Build
|
|
run: go build -v ./cmd/task
|
|
|
|
test:
|
|
name: 🧪 Test (${{ matrix.go-version }}, ${{ matrix.platform }})
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
go-version: [1.25.10, 1.26.x]
|
|
platform: [ubuntu-latest, macos-latest, windows-latest]
|
|
runs-on: ${{ matrix.platform }}
|
|
steps:
|
|
- name: 📥 Checkout
|
|
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
|
|
|
- name: ⬇️ Setup Go
|
|
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
|
|
with:
|
|
go-version: ${{ matrix.go-version }}
|
|
|
|
- name: ⬇️ Setup Task
|
|
uses: go-task/setup-task@v1
|
|
|
|
- name: 🧪 Test
|
|
run: task test --output group --output-group-begin '::group::{{.TASK}}' --output-group-end '::endgroup::'
|
|
|
|
lint:
|
|
name: 🔍 Lint (${{ matrix.go-version }})
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
go-version: [1.25.10, 1.26.x]
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: 📥 Checkout
|
|
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
|
|
|
- name: ⬇️ Setup Go
|
|
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
|
|
with:
|
|
go-version: ${{ matrix.go-version }}
|
|
|
|
- name: 🔍 Lint
|
|
uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
|
|
with:
|
|
version: v2.12.2
|
|
|
|
lint-jsonschema:
|
|
name: 📋 Lint JSON Schema
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: 📥 Checkout
|
|
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
|
|
|
- name: ⬇️ Setup Python
|
|
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
|
|
with:
|
|
python-version: 3.14
|
|
|
|
- name: ⬇️ Install check-jsonschema
|
|
run: python -m pip install 'check-jsonschema==0.27.3'
|
|
|
|
- name: 📋 Validate JSON Schema
|
|
run: check-jsonschema --check-metaschema website/src/public/schema.json
|
|
|
|
govulncheck:
|
|
name: 🛡️ Vulnerabilities
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4
|
|
|
|
ci-status:
|
|
name: ✅ CI
|
|
runs-on: ubuntu-latest
|
|
needs: [build, test, lint, lint-jsonschema, govulncheck]
|
|
if: always()
|
|
steps:
|
|
- name: ✅ Check CI status
|
|
run: |
|
|
if [[ "${{ needs.build.result }}" != "success" ]] || \
|
|
[[ "${{ needs.test.result }}" != "success" ]] || \
|
|
[[ "${{ needs.lint.result }}" != "success" ]] || \
|
|
[[ "${{ needs.lint-jsonschema.result }}" != "success" ]] || \
|
|
[[ "${{ needs.govulncheck.result }}" != "success" ]]; then
|
|
echo "CI failed"
|
|
exit 1
|
|
fi
|
|
echo "CI passed"
|