File tree Expand file tree Collapse file tree 2 files changed +2
-42
lines changed
Expand file tree Collapse file tree 2 files changed +2
-42
lines changed Original file line number Diff line number Diff line change 3939 EOF
4040 - name : Earthly version
4141 run : earthly --version
42- - name : Run Snyk
43- if : ${{ env.SNYK_TOKEN }}
44- run : earthly --ci --secret SNYK_TOKEN +snyk
4542 - name : Run Tests
46- run : earthly --ci +all-except-snyk
43+ run : earthly --ci +all
Original file line number Diff line number Diff line change @@ -300,43 +300,16 @@ coverage-html:
300300 COPY +test-output/cover.out out/cover.out
301301 RUN go tool cover -html = out/cover.out
302302
303- snyk-go :
304- FROM +deps
305- COPY +snyk-linux/snyk $BINPATH
306- COPY --dir controllers/ internal/ cmd/ charts/ api/ .
307- COPY .snyk .
308- RUN --secret SNYK_TOKEN snyk test
309-
310- snyk-helm :
311- FROM alpine/helm:$HELM_VERSION
312- COPY +snyk-alpine/snyk $BINPATH
313- COPY --dir +helm2kube/result .
314- COPY .snyk .
315- RUN --secret SNYK_TOKEN \
316- snyk iac test \
317- --policy-path = .snyk \ # I don't know why the CLI won't pick this up by default...
318- --severity-threshold = high \ # TODO remove this line if you want to fix a lot of issues in the helm charts
319- result
320303
321304# todo: semgrep
322305# semgrep:
323306
324- snyk :
325- BUILD +generate
326- BUILD +snyk-go
327- BUILD +snyk-helm
328-
329- all-except-snyk :
307+ all :
330308 BUILD +generate
331309 BUILD +lint
332310 BUILD +coverage
333311 BUILD +test-multiple-k8s-versions
334312 BUILD +ci
335-
336- all :
337- BUILD +snyk
338- BUILD +all-except-snyk
339-
340313# ##########
341314# helper
342315# ##########
@@ -362,16 +335,6 @@ envoy:
362335 FROM envoyproxy/envoy:$ENVOY_VERSION
363336 SAVE ARTIFACT /usr/local/bin/envoy
364337
365- snyk-linux :
366- FROM snyk/snyk:linux
367- SAVE ARTIFACT /usr/local/bin/snyk
368-
369- # needed for +snyk-helm, as the target is based on alpine/helm,
370- # and this is the only time we need a alpine-based snyk binary
371- snyk-alpine :
372- FROM snyk/snyk:alpine
373- SAVE ARTIFACT /usr/local/bin/snyk
374-
375338helm :
376339 FROM alpine/helm:$HELM_VERSION
377340 SAVE ARTIFACT /usr/bin/helm
You can’t perform that action at this time.
0 commit comments