build(deps): bump astral-sh/setup-uv from 6 to 7 #2
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| jobs: | |
| build: | |
| name: Build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: astral-sh/setup-uv@v7 | |
| - uses: moonrepo/setup-rust@v1 | |
| with: | |
| bins: wasm-tools, wasm-custom-section, just | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - run: just build | |
| - uses: actions/upload-artifact@v7 | |
| with: | |
| name: component.wasm | |
| path: "*.wasm" | |
| e2e: | |
| name: E2E Test | |
| needs: build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/download-artifact@v8 | |
| with: | |
| name: component.wasm | |
| - uses: moonrepo/setup-rust@v1 | |
| with: | |
| bins: just, hurl | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - run: just test | |
| e2e-net: | |
| name: E2E Test (network) | |
| needs: build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/download-artifact@v8 | |
| with: | |
| name: component.wasm | |
| - uses: moonrepo/setup-rust@v1 | |
| with: | |
| bins: just, hurl | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - run: just test-net | |
| lint: | |
| name: Lint | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: astral-sh/setup-uv@v7 | |
| - run: uv run ruff check | |
| - run: uv run ruff format --check | |
| publish: | |
| name: Publish | |
| if: github.ref == 'refs/heads/main' && github.event_name == 'push' | |
| needs: [e2e, lint] | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read # checkout | |
| id-token: write # keyless cosign signing via GitHub OIDC | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/download-artifact@v8 | |
| with: | |
| name: component.wasm | |
| - uses: moonrepo/setup-rust@v1 | |
| with: | |
| bins: just | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - uses: sigstore/cosign-installer@v4.1.2 # defaults to cosign 3.x → OCI 1.1 referrer signatures | |
| - name: Publish | |
| id: publish | |
| env: | |
| # actpkg.dev PAT (any username; the registry detects the PAT by prefix). | |
| OCI_USERNAME: __token__ | |
| OCI_PASSWORD: ${{ secrets.ACTPKG_TOKEN }} | |
| # Source repo URL for org.opencontainers.image.source (read by act-build). | |
| ACT_SOURCE: ${{ github.server_url }}/${{ github.repository }} | |
| run: just publish | |
| - name: Sign (keyless via GitHub OIDC) | |
| if: steps.publish.outputs.digest != '' | |
| env: | |
| ACTPKG_TOKEN: ${{ secrets.ACTPKG_TOKEN }} | |
| SUBJECT: ${{ steps.publish.outputs.image }}@${{ steps.publish.outputs.digest }} | |
| run: | | |
| echo "$ACTPKG_TOKEN" | cosign login actpkg.dev -u __token__ --password-stdin | |
| cosign sign --yes "$SUBJECT" |