Test

chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 in the go_modules group across 1 directory #3896

	name: Test

	on: [pull_request]

	permissions:
	contents: read
	jobs:
	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- name: Check out code into the Go module directory
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false
	# Fetch the integration test data (lockfile fixtures, jar/war binaries).
	# Pinned by commit SHA — bump this ref to update test data, equivalent to
	# advancing a submodule pointer. Use a SHA, not a mutable ref like a
	# branch or `refs/pull/N/merge` (the latter disappears once the PR is
	# merged). Do NOT use `submodules: true` on the checkout above: that
	# reads .gitmodules from the PR head and a fork PR could redirect the
	# URL to attacker-controlled code that `go test` would then execute.
	# The SHA pin here lives in the workflow file, which a PR cannot
	# redirect without a reviewable diff.
	- name: Check out integration test data
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	repository: vulsio/integration
	ref: f1e643c892c9b2445a1a87c7b9cc56647bc40184
	path: integration
	persist-credentials: false
	- name: Set up Go 1.x
	uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
	with:
	go-version-file: go.mod
	- name: go mod tidy check
	run: go mod tidy && git diff --exit-code
	- name: Test
	run: make test

Navigation Menu