ci: enable strict mode by default in opa check #926
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: test rego | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths-ignore: | |
| - "**/*.md" | |
| - "LICENSE" | |
| pull_request: | |
| paths-ignore: | |
| - "**/*.md" | |
| - "LICENSE" | |
| merge_group: | |
| workflow_dispatch: | |
| env: | |
| GO_VERSION: "1.22" | |
| jobs: | |
| opa-tests: | |
| name: OPA tests | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Rego Check | |
| run: go run ./cmd/opa check lib checks --strict --v0-v1 | |
| - name: Setup Regal | |
| uses: StyraInc/setup-regal@33a142b1189004e0f14bf42b15972c67eecce776 # v1 | |
| with: | |
| version: 0.29 | |
| - name: Lint Rego | |
| run: make lint-rego | |
| - name: OPA Format | |
| run: | | |
| make fmt-rego | |
| if [ -n "$(git status --porcelain)" ]; then | |
| echo "Run 'make fmt-rego' and push it" | |
| exit 1 | |
| fi | |
| - name: Test Rego checks | |
| run: make test-rego |