Update (slightly) vulnerable pyca/cryptography dependency #18
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Integration | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| permissions: | |
| contents: read | |
| jobs: | |
| integration: | |
| name: Integration testing | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Setup Docker Compose .env file | |
| run: .github/helpers/gen-compose-env > integration/.env | |
| env: | |
| TEST_APP_KEY_B64: ${{ secrets.TEST_APP_KEY_B64 }} | |
| - name: Build test images | |
| run: docker compose -f integration/docker-compose.yaml build | |
| - name: Bring up Vault server | |
| run: docker compose -f integration/docker-compose.yaml up --wait --detach vault-server | |
| - name: Enable Vault's Transit Engine | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps vault-setup | |
| - name: Import App key (Python 3.10) (constrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py310-constrained import | |
| - name: Issue Access Token (Python 3.10) (constrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py310-constrained issue | |
| - name: Issue scoped Access Token (Python 3.10) (constrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py310-constrained issue-scoped | |
| - name: Import App key (Python 3.10) (unconstrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py310-unconstrained import | |
| - name: Issue Access Token (Python 3.10) (unconstrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py310-unconstrained issue | |
| - name: Issue scoped Access Token (Python 3.10) (unconstrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py310-unconstrained issue-scoped | |
| - name: Import App key (Python 3.11) (constrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py311-constrained import | |
| - name: Issue Access Token (Python 3.11) (constrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py311-constrained issue | |
| - name: Issue scoped Access Token (Python 3.11) (constrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py311-constrained issue-scoped | |
| - name: Import App key (Python 3.11) (unconstrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py311-unconstrained import | |
| - name: Issue Access Token (Python 3.11) (unconstrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py311-unconstrained issue | |
| - name: Issue scoped Access Token (Python 3.11) (unconstrained) | |
| run: docker compose -f integration/docker-compose.yaml run --no-deps testrun-py311-unconstrained issue-scoped |