chore(deps): bump dependencies #91
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # cid-workflow-version: 0.5.0 | |
| # This file is generated by the CID Workflow GitHub App. | |
| # DO NOT EDIT! | |
| # name | |
| name: 'CI - Main' | |
| # triggers | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| loglevel: | |
| description: Log level | |
| required: true | |
| default: info | |
| type: choice | |
| options: | |
| - trace | |
| - debug | |
| - info | |
| - warn | |
| - error | |
| push: | |
| branches: | |
| - main | |
| paths-ignore: | |
| - 'README.md' | |
| - 'LICENSE' | |
| - '.gitignore' | |
| - '.gitattributes' | |
| - '.editorconfig' | |
| - 'renovate.json' | |
| - 'CODEOWNERS' | |
| - 'SECURITY.md' | |
| # permissions, see https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions and https://docs.github.com/en/rest/overview/permissions-required-for-github-apps | |
| permissions: | |
| actions: read # detection of GitHub Actions environment | |
| checks: none | |
| contents: read | |
| deployments: none | |
| id-token: none | |
| issues: none | |
| packages: none | |
| pages: none | |
| pull-requests: none | |
| repository-projects: none | |
| security-events: none | |
| statuses: none | |
| # cancel in progress when a new run starts | |
| concurrency: | |
| group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}" | |
| cancel-in-progress: true | |
| env: | |
| CID_WORKFLOW: 'main' | |
| CID_LOGLEVEL: "${{ github.event.inputs.loglevel || 'info' }}" | |
| # allowed modes are 'block' and 'audit'. Using https://github.com/step-security/harden-runner to harden the runner. | |
| EGRESS_POLICY: 'block' | |
| # jobs | |
| jobs: | |
| # go-build [github.com/cidverse/normalizeci] | |
| go-build-github-com-cidverse-normalizeci: | |
| name: 'go-build [github.com/cidverse/normalizeci]' | |
| runs-on: ubuntu-24.04 # https://github.com/actions/runner-images | |
| permissions: | |
| id-token: write # provenance signing | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| disable-telemetry: true | |
| egress-policy: "${{ env.EGRESS_POLICY }}" | |
| allowed-endpoints: >- | |
| proxy.golang.org:443 | |
| storage.googleapis.com:443 | |
| sum.golang.org:443 | |
| github.com:443 | |
| api.github.com:443 | |
| codeload.github.com:443 | |
| uploads.github.com:443 | |
| objects.githubusercontent.com:443 | |
| raw.githubusercontent.com:443 | |
| release-assets.githubusercontent.com:443 | |
| ghcr.io:443 | |
| pkg-containers.githubusercontent.com:443 | |
| - name: Checkout | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Prepare Tooling | |
| shell: bash | |
| run: bash .cid/scripts/install.sh "0.6.0" "" | |
| - name: Action - go-build [github.com/cidverse/normalizeci] | |
| env: | |
| CID_WORKFLOW: "${{ env.CID_WORKFLOW }}" | |
| CID_LOGLEVEL: "${{ env.CID_LOGLEVEL }}" | |
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| run: | | |
| cid --log-level=${CID_LOGLEVEL:-info} plan execute --state-file ".cid/state-github.json" --state-wf-name "main" --step "go-build-github-com-cidverse-normalizeci" | |
| - name: Upload Outputs | |
| uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 | |
| with: | |
| name: "go-build-github-com-cidverse-normalizeci-${{ github.run_id }}" | |
| path: ".dist/go-build-github-com-cidverse-normalizeci/" | |
| retention-days: 1 | |
| if-no-files-found: ignore | |
| compression-level: 6 | |
| include-hidden-files: true | |
| # go-test [github.com/cidverse/normalizeci] | |
| go-test-github-com-cidverse-normalizeci: | |
| name: 'go-test [github.com/cidverse/normalizeci]' | |
| runs-on: ubuntu-24.04 # https://github.com/actions/runner-images | |
| permissions: | |
| id-token: write # provenance signing | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| disable-telemetry: true | |
| egress-policy: "${{ env.EGRESS_POLICY }}" | |
| allowed-endpoints: >- | |
| proxy.golang.org:443 | |
| storage.googleapis.com:443 | |
| sum.golang.org:443 | |
| github.com:443 | |
| api.github.com:443 | |
| codeload.github.com:443 | |
| uploads.github.com:443 | |
| objects.githubusercontent.com:443 | |
| raw.githubusercontent.com:443 | |
| release-assets.githubusercontent.com:443 | |
| ghcr.io:443 | |
| pkg-containers.githubusercontent.com:443 | |
| - name: Checkout | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Prepare Tooling | |
| shell: bash | |
| run: bash .cid/scripts/install.sh "0.6.0" "" | |
| - name: Action - go-test [github.com/cidverse/normalizeci] | |
| env: | |
| CID_WORKFLOW: "${{ env.CID_WORKFLOW }}" | |
| CID_LOGLEVEL: "${{ env.CID_LOGLEVEL }}" | |
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| run: | | |
| cid --log-level=${CID_LOGLEVEL:-info} plan execute --state-file ".cid/state-github.json" --state-wf-name "main" --step "go-test-github-com-cidverse-normalizeci" | |
| - name: Upload Outputs | |
| uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 | |
| with: | |
| name: "go-test-github-com-cidverse-normalizeci-${{ github.run_id }}" | |
| path: ".dist/go-test-github-com-cidverse-normalizeci/" | |
| retention-days: 1 | |
| if-no-files-found: ignore | |
| compression-level: 6 | |
| include-hidden-files: true | |
| # golangci-lint [github.com/cidverse/normalizeci] | |
| golangci-lint-github-com-cidverse-normalizeci: | |
| name: 'golangci-lint [github.com/cidverse/normalizeci]' | |
| runs-on: ubuntu-24.04 # https://github.com/actions/runner-images | |
| permissions: | |
| id-token: write # provenance signing | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| disable-telemetry: true | |
| egress-policy: "${{ env.EGRESS_POLICY }}" | |
| allowed-endpoints: >- | |
| proxy.golang.org:443 | |
| storage.googleapis.com:443 | |
| sum.golang.org:443 | |
| github.com:443 | |
| api.github.com:443 | |
| codeload.github.com:443 | |
| uploads.github.com:443 | |
| objects.githubusercontent.com:443 | |
| raw.githubusercontent.com:443 | |
| release-assets.githubusercontent.com:443 | |
| ghcr.io:443 | |
| pkg-containers.githubusercontent.com:443 | |
| - name: Checkout | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Prepare Tooling | |
| shell: bash | |
| run: bash .cid/scripts/install.sh "0.6.0" "" | |
| - name: Action - golangci-lint [github.com/cidverse/normalizeci] | |
| env: | |
| CID_WORKFLOW: "${{ env.CID_WORKFLOW }}" | |
| CID_LOGLEVEL: "${{ env.CID_LOGLEVEL }}" | |
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| run: | | |
| cid --log-level=${CID_LOGLEVEL:-info} plan execute --state-file ".cid/state-github.json" --state-wf-name "main" --step "golangci-lint-github-com-cidverse-normalizeci" | |
| - name: Upload Outputs | |
| uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 | |
| with: | |
| name: "golangci-lint-github-com-cidverse-normalizeci-${{ github.run_id }}" | |
| path: ".dist/golangci-lint-github-com-cidverse-normalizeci/" | |
| retention-days: 1 | |
| if-no-files-found: ignore | |
| compression-level: 6 | |
| include-hidden-files: true | |
| # gitleaks-scan | |
| gitleaks-scan: | |
| name: 'gitleaks-scan' | |
| runs-on: ubuntu-24.04 # https://github.com/actions/runner-images | |
| permissions: | |
| id-token: write # provenance signing | |
| security-events: write # upload security events | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| disable-telemetry: true | |
| egress-policy: "${{ env.EGRESS_POLICY }}" | |
| allowed-endpoints: >- | |
| github.com:443 | |
| api.github.com:443 | |
| codeload.github.com:443 | |
| uploads.github.com:443 | |
| objects.githubusercontent.com:443 | |
| raw.githubusercontent.com:443 | |
| release-assets.githubusercontent.com:443 | |
| ghcr.io:443 | |
| pkg-containers.githubusercontent.com:443 | |
| - name: Checkout | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Prepare Tooling | |
| shell: bash | |
| run: bash .cid/scripts/install.sh "0.6.0" "" | |
| - name: Action - gitleaks-scan | |
| env: | |
| CID_WORKFLOW: "${{ env.CID_WORKFLOW }}" | |
| CID_LOGLEVEL: "${{ env.CID_LOGLEVEL }}" | |
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| run: | | |
| cid --log-level=${CID_LOGLEVEL:-info} plan execute --state-file ".cid/state-github.json" --state-wf-name "main" --step "gitleaks-scan" | |
| - name: Upload Outputs | |
| uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 | |
| with: | |
| name: "gitleaks-scan-${{ github.run_id }}" | |
| path: ".dist/gitleaks-scan/" | |
| retention-days: 1 | |
| if-no-files-found: ignore | |
| compression-level: 6 | |
| include-hidden-files: true | |
| # semgrep-scan | |
| semgrep-scan: | |
| name: 'semgrep-scan' | |
| runs-on: ubuntu-24.04 # https://github.com/actions/runner-images | |
| permissions: | |
| id-token: write # provenance signing | |
| security-events: write # upload security events | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| disable-telemetry: true | |
| egress-policy: "${{ env.EGRESS_POLICY }}" | |
| allowed-endpoints: >- | |
| semgrep.dev:443 | |
| github.com:443 | |
| api.github.com:443 | |
| codeload.github.com:443 | |
| uploads.github.com:443 | |
| objects.githubusercontent.com:443 | |
| raw.githubusercontent.com:443 | |
| release-assets.githubusercontent.com:443 | |
| ghcr.io:443 | |
| pkg-containers.githubusercontent.com:443 | |
| - name: Checkout | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Prepare Tooling | |
| shell: bash | |
| run: bash .cid/scripts/install.sh "0.6.0" "" | |
| - name: Action - semgrep-scan | |
| env: | |
| CID_WORKFLOW: "${{ env.CID_WORKFLOW }}" | |
| CID_LOGLEVEL: "${{ env.CID_LOGLEVEL }}" | |
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| SEMGREP_RULES: "${{ secrets.SEMGREP_RULES || vars.SEMGREP_RULES }}" | |
| SEMGREP_APP_TOKEN: "${{ secrets.SEMGREP_APP_TOKEN }}" | |
| run: | | |
| cid --log-level=${CID_LOGLEVEL:-info} plan execute --state-file ".cid/state-github.json" --state-wf-name "main" --step "semgrep-scan" | |
| - name: Upload Outputs | |
| uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 | |
| with: | |
| name: "semgrep-scan-${{ github.run_id }}" | |
| path: ".dist/semgrep-scan/" | |
| retention-days: 1 | |
| if-no-files-found: ignore | |
| compression-level: 6 | |
| include-hidden-files: true | |
| # trivyfs-scan | |
| trivyfs-scan: | |
| name: 'trivyfs-scan' | |
| runs-on: ubuntu-24.04 # https://github.com/actions/runner-images | |
| permissions: | |
| id-token: write # provenance signing | |
| security-events: write # upload security events | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| disable-telemetry: true | |
| egress-policy: "${{ env.EGRESS_POLICY }}" | |
| allowed-endpoints: >- | |
| mirror.gcr.io:443 | |
| github.com:443 | |
| api.github.com:443 | |
| codeload.github.com:443 | |
| uploads.github.com:443 | |
| objects.githubusercontent.com:443 | |
| raw.githubusercontent.com:443 | |
| release-assets.githubusercontent.com:443 | |
| ghcr.io:443 | |
| pkg-containers.githubusercontent.com:443 | |
| - name: Checkout | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Prepare Tooling | |
| shell: bash | |
| run: bash .cid/scripts/install.sh "0.6.0" "" | |
| - name: Action - trivyfs-scan | |
| env: | |
| CID_WORKFLOW: "${{ env.CID_WORKFLOW }}" | |
| CID_LOGLEVEL: "${{ env.CID_LOGLEVEL }}" | |
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| run: | | |
| cid --log-level=${CID_LOGLEVEL:-info} plan execute --state-file ".cid/state-github.json" --state-wf-name "main" --step "trivyfs-scan" | |
| - name: Upload Outputs | |
| uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 | |
| with: | |
| name: "trivyfs-scan-${{ github.run_id }}" | |
| path: ".dist/trivyfs-scan/" | |
| retention-days: 1 | |
| if-no-files-found: ignore | |
| compression-level: 6 | |
| include-hidden-files: true | |
| # zizmor-scan | |
| zizmor-scan: | |
| name: 'zizmor-scan' | |
| runs-on: ubuntu-24.04 # https://github.com/actions/runner-images | |
| permissions: | |
| id-token: write # provenance signing | |
| security-events: write # upload security events | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| disable-telemetry: true | |
| egress-policy: "${{ env.EGRESS_POLICY }}" | |
| allowed-endpoints: >- | |
| github.com:443 | |
| api.github.com:443 | |
| codeload.github.com:443 | |
| uploads.github.com:443 | |
| objects.githubusercontent.com:443 | |
| raw.githubusercontent.com:443 | |
| release-assets.githubusercontent.com:443 | |
| ghcr.io:443 | |
| pkg-containers.githubusercontent.com:443 | |
| - name: Checkout | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Prepare Tooling | |
| shell: bash | |
| run: bash .cid/scripts/install.sh "0.6.0" "" | |
| - name: Action - zizmor-scan | |
| env: | |
| CID_WORKFLOW: "${{ env.CID_WORKFLOW }}" | |
| CID_LOGLEVEL: "${{ env.CID_LOGLEVEL }}" | |
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| GH_HOSTNAME: "${{ secrets.GH_HOSTNAME || vars.GH_HOSTNAME }}" | |
| GH_TOKEN: "${{ secrets.GH_TOKEN || vars.GH_TOKEN }}" | |
| run: | | |
| cid --log-level=${CID_LOGLEVEL:-info} plan execute --state-file ".cid/state-github.json" --state-wf-name "main" --step "zizmor-scan" | |
| - name: Upload Outputs | |
| uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 | |
| with: | |
| name: "zizmor-scan-${{ github.run_id }}" | |
| path: ".dist/zizmor-scan/" | |
| retention-days: 1 | |
| if-no-files-found: ignore | |
| compression-level: 6 | |
| include-hidden-files: true | |
| # sonarqube-scan | |
| sonarqube-scan: | |
| name: 'sonarqube-scan' | |
| runs-on: ubuntu-24.04 # https://github.com/actions/runner-images | |
| needs: [go-test-github-com-cidverse-normalizeci] | |
| permissions: | |
| id-token: write # provenance signing | |
| security-events: write # upload security events | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| disable-telemetry: true | |
| egress-policy: "${{ env.EGRESS_POLICY }}" | |
| allowed-endpoints: >- | |
| sonarcloud.io:443 | |
| api.sonarcloud.io:443 | |
| scanner.sonarcloud.io:443 | |
| github.com:443 | |
| api.github.com:443 | |
| codeload.github.com:443 | |
| uploads.github.com:443 | |
| objects.githubusercontent.com:443 | |
| raw.githubusercontent.com:443 | |
| release-assets.githubusercontent.com:443 | |
| ghcr.io:443 | |
| pkg-containers.githubusercontent.com:443 | |
| - name: Checkout | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Prepare Tooling | |
| shell: bash | |
| run: bash .cid/scripts/install.sh "0.6.0" "" | |
| - name: Download Inputs > go-test-github-com-cidverse-normalizeci | |
| uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 | |
| with: | |
| name: "go-test-github-com-cidverse-normalizeci-${{ github.run_id }}" | |
| path: ".dist/go-test-github-com-cidverse-normalizeci" | |
| continue-on-error: true | |
| - name: Action - sonarqube-scan | |
| env: | |
| CID_WORKFLOW: "${{ env.CID_WORKFLOW }}" | |
| CID_LOGLEVEL: "${{ env.CID_LOGLEVEL }}" | |
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| SONAR_HOST_URL: "${{ secrets.SONAR_HOST_URL || vars.SONAR_HOST_URL }}" | |
| SONAR_ORGANIZATION: "${{ secrets.SONAR_ORGANIZATION || vars.SONAR_ORGANIZATION }}" | |
| SONAR_PROJECTKEY: "${{ secrets.SONAR_PROJECTKEY || vars.SONAR_PROJECTKEY }}" | |
| SONAR_DEFAULT_BRANCH: "${{ secrets.SONAR_DEFAULT_BRANCH || vars.SONAR_DEFAULT_BRANCH }}" | |
| SONAR_REGION: "${{ secrets.SONAR_REGION || vars.SONAR_REGION }}" | |
| SONAR_TOKEN: "${{ secrets.SONAR_TOKEN }}" | |
| run: | | |
| cid --log-level=${CID_LOGLEVEL:-info} plan execute --state-file ".cid/state-github.json" --state-wf-name "main" --step "sonarqube-scan" | |
| - name: Upload Outputs | |
| uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 | |
| with: | |
| name: "sonarqube-scan-${{ github.run_id }}" | |
| path: ".dist/sonarqube-scan/" | |
| retention-days: 1 | |
| if-no-files-found: ignore | |
| compression-level: 6 | |
| include-hidden-files: true | |
| # codecov-upload | |
| codecov-upload: | |
| name: 'codecov-upload' | |
| runs-on: ubuntu-24.04 # https://github.com/actions/runner-images | |
| needs: [go-test-github-com-cidverse-normalizeci] | |
| permissions: | |
| id-token: write # provenance signing | |
| security-events: write # upload security events | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| disable-telemetry: true | |
| egress-policy: "${{ env.EGRESS_POLICY }}" | |
| allowed-endpoints: >- | |
| ingest.codecov.io:443 | |
| storage.googleapis.com:443 | |
| api.codecov.io:443 | |
| github.com:443 | |
| api.github.com:443 | |
| codeload.github.com:443 | |
| uploads.github.com:443 | |
| objects.githubusercontent.com:443 | |
| raw.githubusercontent.com:443 | |
| release-assets.githubusercontent.com:443 | |
| ghcr.io:443 | |
| pkg-containers.githubusercontent.com:443 | |
| - name: Checkout | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Prepare Tooling | |
| shell: bash | |
| run: bash .cid/scripts/install.sh "0.6.0" "" | |
| - name: Download Inputs > go-test-github-com-cidverse-normalizeci | |
| uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 | |
| with: | |
| name: "go-test-github-com-cidverse-normalizeci-${{ github.run_id }}" | |
| path: ".dist/go-test-github-com-cidverse-normalizeci" | |
| continue-on-error: true | |
| - name: Action - codecov-upload | |
| env: | |
| CID_WORKFLOW: "${{ env.CID_WORKFLOW }}" | |
| CID_LOGLEVEL: "${{ env.CID_LOGLEVEL }}" | |
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| CODECOV_TOKEN: "${{ secrets.CODECOV_TOKEN }}" | |
| run: | | |
| cid --log-level=${CID_LOGLEVEL:-info} plan execute --state-file ".cid/state-github.json" --state-wf-name "main" --step "codecov-upload" | |
| - name: Upload Outputs | |
| uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 | |
| with: | |
| name: "codecov-upload-${{ github.run_id }}" | |
| path: ".dist/codecov-upload/" | |
| retention-days: 1 | |
| if-no-files-found: ignore | |
| compression-level: 6 | |
| include-hidden-files: true |