feat: add ztsd layer support for cve scans #6347
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This is a conformance test workflow that is automatically triggered with each PR | |
| name: conformance | |
| # Controls when the action will run. Workflow runs when manually triggered using the UI | |
| # or API. | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| permissions: read-all | |
| # A workflow run is made up of one or more jobs that can run sequentially or in parallel | |
| jobs: | |
| run: | |
| runs-on: ubuntu-latest | |
| # Steps represent a sequence of tasks that will be executed as part of the job | |
| steps: | |
| - name: Install go 1.26 | |
| uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 | |
| with: | |
| cache: false | |
| check-latest: true | |
| go-version: 1.26.x | |
| - name: Checkout this PR | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Start zot server | |
| run: | | |
| cd $GITHUB_WORKSPACE | |
| make binary | |
| RUNNER_TRACKING_ID="" && ./bin/zot-linux-amd64 serve examples/config-conformance.json & | |
| IP=`hostname -I | awk '{print $1}'` | |
| echo "OCI_REGISTRY=${IP}:8080" >> $GITHUB_ENV | |
| - name: run conformance | |
| # pinned to opencontainers/distribution-spec main@fcfba1ec55526073f48b2f6d4e3d7eef410ddcbc | |
| uses: opencontainers/distribution-spec@967efdc079b91785ad18c77cc4f8991a47feefbf | |
| env: | |
| OCI_REGISTRY: ${{ env.OCI_REGISTRY }} | |
| OCI_TLS: "disabled" | |
| OCI_REPO1: oci-conformance/distribution-test | |
| OCI_REPO2: oci-conformance/crossmount-test | |
| OCI_VERSION: "1.1" | |
| OCI_RESULTS_DIR: "." | |
| - name: upload conformance artifacts | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| if: always() | |
| with: | |
| name: oci-conformance-results | |
| # Conformance output has used result.yaml/results.yaml across upstream versions. | |
| path: | | |
| junit.xml | |
| report.html | |
| result*.yaml |