build-dev.yaml

name: Test Build

on:
  push:

  pull_request:

jobs:
  build-container:
    runs-on: ubuntu-latest

    env:
      EXPORT_RESULT: true

    steps:
      - run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event."
      - run: echo "🔎 The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}."

      - name: Checkout
        uses: actions/checkout@v3

      - name: Setup Go
        uses: actions/setup-go@v4
        with:
          go-version: "^1.17"

      - name: Test build
        run: go build

      - name: Run unit tests
        run: make unit-test

      - name: Run coverage report
        run: make coverage

      - name: Codecov
        uses: codecov/codecov-action@v3.1.4

      - name: Run Trivy vulnerability scanner
        uses: aquasecurity/trivy-action@0.11.0
        with:
          scan-type: "fs"
          ignore-unfixed: true
          format: "table"
          exit-code: "1"
          vuln-type: "os,library"
          severity: "CRITICAL,HIGH"