celo-org / celo-blockchain

Official repository for the golang Celo Blockchain
https://celo.org
GNU Lesser General Public License v3.0
554 stars 199 forks source link

update reusable workflow to version 2.0, to add scanning for gha-cred… #2250

Closed pputman-clabs closed 7 months ago

pputman-clabs commented 7 months ago

…entials inside of containers

Description

Updating to version 2.0 of reusableo workflows. This contains a feature that scans for workload identity credentials inside the container and will fail the build if its there, along with an error message of how to resolve the problem (adding gha-creds-*.json to proper ignore files such as .gitignore and .dockerignore

Other changes

None

Tested

Tested in other repositories to make sure it will cause the build to fail if it finds a file matching the regex 'gha-creds-.*.json'

Related issues

Backwards compatibility

Should be fully backwards compatible.

github-actions[bot] commented 7 months ago

Coverage from tests in ./e2e_test/... for ./consensus/istanbul/... at commit 6129362ce073e5d4df6ca8380d80139799bfc3ab

coverage: 50.6% of statements across all listed packages
coverage:  63.4% of statements in consensus/istanbul
coverage:  42.7% of statements in consensus/istanbul/announce
coverage:  55.7% of statements in consensus/istanbul/backend
coverage:   0.0% of statements in consensus/istanbul/backend/backendtest
coverage:  24.3% of statements in consensus/istanbul/backend/internal/replica
coverage:  64.4% of statements in consensus/istanbul/core
coverage:  50.0% of statements in consensus/istanbul/db
coverage:   0.0% of statements in consensus/istanbul/proxy
coverage:  64.2% of statements in consensus/istanbul/uptime
coverage:  51.8% of statements in consensus/istanbul/validator
coverage:  79.2% of statements in consensus/istanbul/validator/random
github-actions[bot] commented 7 months ago
5891 passed, 45 skipped