publish-to-bcr/.github/workflows/action-e2e.yaml at 0e74ba6f869f21ad7d5dcf5786b2119fa3e5a17e · bazel-contrib/publish-to-bcr · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
# End-to-end tests for the Publish to BCR custom GitHub action
name: action-e2e
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:
concurrency:
  # Cancel previous actions from the same PR or branch except 'main' branch.
  # See https://docs.github.com/en/actions/using-jobs/using-concurrency and https://docs.github.com/en/actions/learn-github-actions/contexts for more info.
  group: concurrency-group::${{ github.workflow }}::${{ github.event.pull_request.number > 0 && format('pr-{0}', github.event.pull_request.number) || github.ref_name }}${{ github.ref_name == 'main' && format('::{0}', github.run_id) || ''}}
  cancel-in-progress: ${{ github.ref_name != 'main' }}
jobs:
  # Each job is an e2e test. Unfortunately a full workflow cannot be added as
  # required status check on branch protection rules, so each test must be added
  # as a required check: https://github.com/orgs/community/discussions/12395.
  test-happy-path:
    # Create a new module entry and test the content
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
        with:
          path: this
      - name: Setup test fixture
        run: this/e2e/action/setup-test-fixture.sh versioned versioned-1.0.0
      - name: Create registry
        run: |
          mkdir -p bazel-central-registry/modules
          cd bazel-central-registry
          git init
      - name: Create entry
        id: create_entry
        uses: ./this
        with:
          tag: v1.0.0
          module-version: 1.0.0
          github-repository: foobar/versioned
          templates-dir: this/e2e/fixtures/versioned/.bcr
          local-registry: bazel-central-registry
      - name: Test entry content
        run: this/e2e/action/test-happy-path-content.sh
      - name: Test output
        run: |
          set -o errexit -o nounset -o pipefail -o xtrace

          if [[ "${{ steps.create_entry.outputs.module-name }}" != "versioned" ]]; then
            echo "Expected output module-name to be 'versioned' but it was '${{ steps.create_entry.outputs.module-name }}'"
            exit 1
          fi
  test-github-repository-default:
    # Test that the `github-repository` input defaults to ${{ github.repository }}
    # indirectly by checking the resulting subtituted source.json file in the entry.
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
        with:
          path: this
      - name: Setup test fixture
        run: this/e2e/action/setup-test-fixture.sh versioned publish-to-bcr-1.0.0
      - name: Create registry
        run: |
          mkdir -p bazel-central-registry/modules
          cd bazel-central-registry
          git init
      - name: Create entry
        uses: ./this
        with:
          tag: v1.0.0
          module-version: 1.0.0
          templates-dir: this/e2e/fixtures/versioned/.bcr
          local-registry: bazel-central-registry
      - name: Test repository substitution
        run: this/e2e/action/test-github-repository-default-substitution.sh
  test-attestations:
    # Test that attestations are created when `attest` is set to true
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      attestations: write
    steps:
      - uses: actions/checkout@v2
        with:
          path: this
      - name: Setup test fixture
        run: this/e2e/action/setup-test-fixture.sh versioned versioned-1.0.0
      - name: Create registry
        run: |
          mkdir -p bazel-central-registry/modules
          cd bazel-central-registry
          git init
      - name: Create entry
        uses: ./this
        with:
          attest: true
          attestations-dest: attestations
          tag: v1.0.0
          module-version: 1.0.0
          github-repository: foobar/versioned
          templates-dir: this/e2e/fixtures/versioned/.bcr
          local-registry: bazel-central-registry
      - name: Test attestations exist
        run: |
          set -o errexit -o nounset -o pipefail -o xtrace

          [ -f attestations/MODULE.bazel.intoto.jsonl ]
          [ -f attestations/source.json.intoto.jsonl ]