Skip to content

mask password from openvpn clients in debug logs. (user password from SSO accounts not affected) #1390

mask password from openvpn clients in debug logs. (user password from SSO accounts not affected)

mask password from openvpn clients in debug logs. (user password from SSO accounts not affected) #1390

Workflow file for this run

name: CI
on:
workflow_dispatch:
pull_request:
push:
tags:
- 'v*'
branches:
- main
jobs:
build:
runs-on: ubuntu-24.04
name: Build & Test
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
- uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
with:
go-version-file: 'go.mod'
- run: go build
- run: go test ./... -timeout 20s -race -covermode=atomic -coverprofile=coverage.out -coverpkg=./...
- run: go test ./... -timeout 20s -bench . -benchmem -count 3
- name: Write gpg sign key
if: env.GPG_KEY != null
run: echo "$GPG_KEY" > "$GPG_KEY_PATH"
env:
GPG_KEY_PATH: "${{ secrets.GPG_KEY_PATH }}"
GPG_KEY: ${{ secrets.GPG_KEY }}
- name: go build (with goreleaser)
uses: goreleaser/goreleaser-action@90a3faa9d0182683851fbfa97ca1a2cb983bfca3 # v6.2.1
with:
# renovate: github=goreleaser/goreleaser
version: v2.7.0
args: release --snapshot
env:
GITHUB_TOKEN: ""
GPG_KEY_PATH: ""
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
env:
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: dists
path: dist/
lint:
name: lint
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
with:
go-version-file: 'go.mod'
- run: go mod tidy -diff
- name: golangci-lint
uses: golangci/golangci-lint-action@051d91933864810ecd5e2ea2cfd98f6a5bca5347 # v6.3.2
with:
version: ${{ env.GO_LINT_CI_VERSION }}
super-lint:
name: super-lint
runs-on: ubuntu-24.04
permissions:
contents: read
steps:
- name: Checkout Code
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
- name: Lint Code Base
uses: super-linter/super-linter/slim@85f7611e0f7b53c8573cca84aa0ed4344f6f6a4d # v7.2.1
env:
EDITORCONFIG_FILE_NAME: .editorconfig-checker.json
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
MULTI_STATUS: false
LINTER_RULES_PATH: .
VALIDATE_ALL_CODEBASE: true
VALIDATE_BASH: true
VALIDATE_BASH_EXEC: true
VALIDATE_EDITORCONFIG: true
VALIDATE_ENV: true
# VALIDATE_GO_RELEASER: true
VALIDATE_GITHUB_ACTIONS: true
VALIDATE_HTML: true
VALIDATE_JSON: true
VALIDATE_NATURAL_LANGUAGE: true
# VALIDATE_MARKDOWN: false
VALIDATE_RENOVATE: true
VALIDATE_SHELL_SHFMT: true
VALIDATE_XML: true
VALIDATE_YAML: true
publish:
name: Publish package
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
needs:
- build
- lint
- super-lint
runs-on: ubuntu-24.04
permissions:
contents: write
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
- uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
with:
go-version-file: 'go.mod'
- name: Write gpg sign key
run: echo "$GPG_KEY" > "$GPG_KEY_PATH"
env:
GPG_KEY_PATH: "${{ secrets.GPG_KEY_PATH }}"
GPG_KEY: ${{ secrets.GPG_KEY }}
- name: Run GoReleaser
uses: goreleaser/goreleaser-action@90a3faa9d0182683851fbfa97ca1a2cb983bfca3 # v6.2.1
with:
# renovate: github=goreleaser/goreleaser
version: v2.7.0
args: release --clean
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GORELEASER_CURRENT_TAG: ${{ github.ref_name }}
NFPM_OPENVPN-AUTH-OAUTH2_PASSPHRASE: ${{ secrets.NFPM_PASSPHRASE }}
GPG_KEY_PATH: ${{ secrets.GPG_KEY_PATH }}