Repository navigation

test: e2e for the four payload kinds that had never met an API server #131

	name: ci

	on:
	push:
	branches: [main]
	pull_request:

	permissions:
	contents: read

	jobs:
	secret-scan:
	name: Secret scan (gitleaks)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	with:
	fetch-depth: 0
	- name: Run gitleaks over full history
	run: \|
	docker run --rm -v "$PWD:/repo" --entrypoint sh \
	ghcr.io/gitleaks/gitleaks:latest \
	-c 'git config --global --add safe.directory /repo &&
	gitleaks detect --source /repo --no-banner --redact'

	build-test:
	name: Build and test
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: actions/setup-go@v7
	with:
	go-version-file: go.mod
	- run: go build ./...
	- run: go test -race ./...
	# The e2e tests are behind a build tag and so are never compiled by the
	# run above; type-check them here so a changed signature cannot rot there
	# unnoticed. They still only execute against a kind cluster.
	- run: go vet -tags e2e ./...

	lint:
	name: Lint (golangci-lint)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: actions/setup-go@v7
	with:
	go-version-file: go.mod
	- uses: golangci/golangci-lint-action@v9
	with:
	version: v2.11.4

	# Added together with the protobuf schema:
	# proto: buf lint && buf breaking --against main