-
Notifications
You must be signed in to change notification settings - Fork 80
57 lines (50 loc) · 1.82 KB
/
Copy pathconformance.yml
File metadata and controls
57 lines (50 loc) · 1.82 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
name: Conformance Tests
on:
push:
branches:
- main
workflow_dispatch:
pull_request:
schedule:
- cron: "45 7 * * 1,4"
permissions: {}
jobs:
conformance:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
- name: install sigstore-python
run: |
uv venv
uv pip install .
echo "$(pwd)/.venv/bin" >> ${GITHUB_PATH}
- uses: sigstore/sigstore-conformance@21533cde107c734ebc153c3e3a24d75fc9811a36 # v0.0.29
with:
entrypoint: ${{ github.workspace }}/test/integration/sigstore-python-conformance
xfail: "test_verify*intoto-with-custom-trust-root]
test_verify*managed-key-happy-path]
test_verify*managed-key-and-trusted-root]" # see issues 1442, 1244
file-issue-on-failure:
needs: [ conformance ]
if: failure() && github.event_name == 'schedule' && github.repository ==
'sigstore/sigstore-python'
permissions:
issues: write # required to file an issue
runs-on: ubuntu-latest
steps:
- name: File an issue for conformance test failure
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
github.rest.issues.create({
owner: context.repo.owner,
repo: context.repo.repo,
title: `[CI] Scheduled conformance test failed`,
body: `
A scheduled conformance test failed, see [run details](${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}).
`
});