fix: upgrade dependencies to fix some CVEs #518
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Integration (FastAuth & Image build) | |
on: | |
push: | |
branches: | |
- develop | |
pull_request: | |
paths: | |
- integration-tests/fastauth/** | |
- mpc-recovery/** | |
- load-tests/** | |
- test-oidc-provider/** | |
jobs: | |
integrations: | |
name: Integration | |
strategy: | |
matrix: | |
# FIXME: macos-latest-xl is disabled since colima is erroring out right now | |
os: [ubuntu-latest] | |
runs-on: ${{ matrix.os }} | |
steps: | |
- uses: actions/checkout@v3 | |
- name: Install Docker | |
if: ${{ matrix.os == 'macos-latest-xl' }} | |
run: | | |
brew install docker | |
colima start | |
# Colima does not expose the Docker socket by default, we have to symlink it | |
# https://github.com/abiosoft/colima/blob/main/docs/FAQ.md#cannot-connect-to-the-docker-daemon-at-unixvarrundockersock-is-the-docker-daemon-running | |
sudo ln -sf $HOME/.colima/default/docker.sock /var/run/docker.sock | |
- name: Login to GitHub Container Registry | |
uses: docker/login-action@v1 | |
with: | |
registry: ghcr.io | |
username: ${{ github.actor }} | |
password: ${{ secrets.GITHUB_TOKEN }} | |
- name: Pull Relayer & Sandbox Docker Images | |
run: | | |
docker pull ghcr.io/near/os-relayer:12ba6e35690df3979fce0b36a41d0ca0db9c0ab4 | |
docker pull ghcr.io/near/sandbox | |
- name: Build OIDC Provider Dcoker Image | |
run: docker build -t near/test-oidc-provider ./test-oidc-provider | |
- name: Login to GCP Artifact Registry | |
run: echo "$GOOGLE_CREDENTIALS" | docker login -u _json_key --password-stdin https://us-east1-docker.pkg.dev | |
env: | |
GOOGLE_CREDENTIALS: ${{ secrets.GCP_CREDENTIALS_DEV }} | |
- name: Install stable toolchain | |
uses: actions-rs/toolchain@v1 | |
with: | |
profile: minimal | |
toolchain: stable | |
target: wasm32-unknown-unknown | |
- uses: Swatinem/rust-cache@v1 | |
- name: Install Protoc | |
uses: arduino/setup-protoc@v1.1.2 | |
with: | |
repo-token: ${{ secrets.GITHUB_TOKEN }} | |
- name: Test | |
working-directory: ./integration-tests/fastauth | |
run: cargo test --jobs 1 -- --test-threads 1 | |
env: | |
RUST_LOG: INFO | |
RUST_BACKTRACE: 1 |