fix(acl): Improve error handling #423

Workflow file for this run

	name: CI

	on:
	push:
	branches:
	- release-*
	pull_request:
	branches:
	- main
	workflow_dispatch: {}

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	env:
	DOCKER_BUILDX_VERSION: "v0.33.0"

	# Common users. We can't run a step 'if secrets.AWS_USR != ""' but we can run
	# a step 'if env.AWS_USR' != ""', so we copy these to succinctly test whether
	# credentials have been provided before trying to run steps that need them.
	CONTRIB_DOCKER_USR: ${{ secrets.CONTRIB_DOCKER_USR }}
	XPKG_ACCESS_ID: ${{ secrets.XPKG_ACCESS_ID }}
	AWS_USR: ${{ secrets.AWS_USR }}

	jobs:
	detect-noop:
	runs-on: ubuntu-24.04
	outputs:
	noop: ${{ steps.noop.outputs.should_skip }}
	steps:
	- name: Detect No-op Changes
	id: noop
	uses: fkirc/skip-duplicate-actions@b974a9395958c231af965b70070979a577efa578 # v5.3.2
	with:
	github_token: ${{ secrets.GITHUB_TOKEN }}
	paths_ignore: '[".md", ".png", "**.jpg"]'
	do_not_skip: '["workflow_dispatch", "schedule", "push"]'

	lint:
	runs-on: ubuntu-24.04
	needs: detect-noop
	if: needs.detect-noop.outputs.noop != 'true'

	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	submodules: true

	- uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
	with:
	go-version-file: go.mod

	- name: Detect golangci-lint version
	id: golangci-lint-version
	run: \|
	VERSION=$(awk '/^GOLANGCILINT_VERSION/{gsub(/[[:space:]]/, "", $3); print $3}' Makefile)
	echo "version=v${VERSION}" \| tee -a "$GITHUB_OUTPUT"

	- name: Vendor Dependencies
	run: make vendor vendor.check

	# We could run 'make lint' to ensure our desired Go version, but we
	# prefer this action because it leaves 'annotations' (i.e. it comments
	# on PRs to point out linter violations).
	- name: Lint
	uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
	with:
	version: ${{ steps.golangci-lint-version.outputs.version }}
	args: --timeout 10m0s

	check-diff:
	runs-on: ubuntu-24.04
	needs: detect-noop
	if: needs.detect-noop.outputs.noop != 'true'

	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	fetch-depth: 0
	submodules: true

	- name: Setup Go
	uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
	with:
	go-version-file: go.mod

	- name: Install goimports
	run: go install golang.org/x/tools/cmd/goimports@v0.41.0

	- name: Vendor Dependencies
	run: make vendor vendor.check

	- name: Check Diff
	run: make check-diff

	unit-tests:
	runs-on: ubuntu-24.04
	needs: detect-noop
	if: needs.detect-noop.outputs.noop != 'true'

	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	submodules: true

	- name: Fetch History
	run: git fetch --prune --unshallow

	- name: Setup Go
	uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
	with:
	go-version-file: go.mod

	- name: Vendor Dependencies
	run: make vendor vendor.check

	- name: Run Unit Tests
	run: make test

	- name: Publish Unit Test Coverage
	uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
	with:
	flags: unittests
	files: _output/tests/linux_amd64/coverage.txt
	override_branch: ${{ github.head_ref \|\| github.ref_name }}

	build-test:
	runs-on: ubuntu-24.04
	needs: detect-noop
	if: needs.detect-noop.outputs.noop != 'true'

	steps:
	- name: Setup QEMU
	uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
	with:
	platforms: all

	- name: Setup Docker Buildx
	uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
	with:
	version: ${{ env.DOCKER_BUILDX_VERSION }}

	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	submodules: true

	- name: Fetch History
	run: git fetch --prune --unshallow

	- name: Setup Go
	uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
	with:
	go-version-file: go.mod

	- name: Build locally
	run: make local-deploy

	publish-artifacts:
	runs-on: ubuntu-24.04
	needs:
	- detect-noop
	- unit-tests
	- build-test
	if: needs.detect-noop.outputs.noop != 'true'

	steps:
	- name: Setup QEMU
	uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
	with:
	platforms: all

	- name: Setup Docker Buildx
	uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
	with:
	version: ${{ env.DOCKER_BUILDX_VERSION }}

	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	submodules: true

	- name: Fetch History
	run: git fetch --prune --unshallow

	- name: Setup Go
	uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
	with:
	go-version-file: go.mod

	- name: Vendor Dependencies
	run: make vendor vendor.check

	- name: Build Artifacts
	run: make -j2 build.all
	env:
	# We're using docker buildx, which doesn't actually load the images it
	# builds by default. Specifying --load does so.
	BUILD_ARGS: "--load"

	- name: Publish Artifacts to GitHub
	uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
	with:
	name: output
	path: _output/**

Navigation Menu

Uh oh!

fix(acl): Improve error handling #423

Workflow file

fix(acl): Improve error handling #423

Uh oh!

Workflow file for this run