production-deploy.yml: - Replace actions-rs/toolchain@v1 with dtolnay/rust-toolchain@stable - Upgrade actions/cache@v3 -> @v4 - Upgrade github/codeql-action/upload-sarif@v2 -> @v3 - Upgrade actions/upload-artifact@v3 -> @v4 backend-ci.yml: - Upgrade Go 1.22 -> 1.23 to match go.mod (1.23.8) Addresses audit findings A08: deprecated actions and outdated Go version. Co-authored-by: Cursor <cursoragent@cursor.com>
40 lines
796 B
YAML
40 lines
796 B
YAML
name: Backend API CI
|
|
|
|
on:
|
|
push:
|
|
paths:
|
|
- "veza-backend-api/**"
|
|
- ".github/workflows/backend-ci.yml"
|
|
pull_request:
|
|
paths:
|
|
- "veza-backend-api/**"
|
|
- ".github/workflows/backend-ci.yml"
|
|
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
|
|
defaults:
|
|
run:
|
|
working-directory: veza-backend-api
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version: "1.23"
|
|
cache: true
|
|
|
|
- name: Download deps
|
|
run: go mod download
|
|
|
|
- name: Run govulncheck
|
|
run: |
|
|
go install golang.org/x/vuln/cmd/govulncheck@latest
|
|
govulncheck ./...
|
|
|
|
- name: Run tests
|
|
run: go test ./internal/handlers/... ./internal/services/... -short
|
|
|