e2e.yaml

name: Run e2e Tests

on:
  push:
    branches:
      - "main"
  pull_request:
  workflow_dispatch:

jobs:
  tests:
    runs-on: ubuntu-latest
    steps:
        - uses: imjasonh/setup-crane@v0.3
          name: Setup crane 🪿 ♥️ 🏗️

        - name: Install Cosign 🪿 ♥️ ·∫·
          uses: sigstore/cosign-installer@v3.2.0

        - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v2.2.0
          with:
            go-version: '1.21'
            check-latest: true
  
        - name: Check out code onto GOPATH
          uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

        - name: Launch Registry
          run: |
            if [ "$(docker inspect -f '{{.State.Running}}' registry 2>/dev/null || true)" != 'true' ]; then
              docker run -d --restart=always -p "127.0.0.1:5000:5000" --network bridge --name registry \
              registry:2
            fi
        - name: Push Test Images
          run: |
            crane push ./test/e2e/testdata/wolfi-base-docker.tar localhost:5000/wolfi-base:latest
            crane push ./test/e2e/testdata/wolfi-base-att/ localhost:5000/wolfi-base:sha256-4d31ef1460be2813657ce7ab3cfd0df2a7366a9b72732d4978b2794cbeb8cd32.att
            crane push ./test/e2e/testdata/wolfi-base-sig/ localhost:5000/wolfi-base:sha256-4d31ef1460be2813657ce7ab3cfd0df2a7366a9b72732d4978b2794cbeb8cd32.sig
            crane push ./test/e2e/testdata/wolfi-base-docker.tar localhost:5000/notsigned:latest
            crane push ./test/e2e/testdata/alpine-cves localhost:5000/alpine-cves
            crane push ./test/e2e/testdata/alpine-cves.att localhost:5000/alpine-cves:sha256-eece025e432126ce23f223450a0326fbebde39cdf496a85d8c016293fc851978.att
                        
            crane digest localhost:5000/wolfi-base:latest
            crane digest localhost:5000/wolfi-base:sha256-4d31ef1460be2813657ce7ab3cfd0df2a7366a9b72732d4978b2794cbeb8cd32.att
            crane digest localhost:5000/wolfi-base:sha256-4d31ef1460be2813657ce7ab3cfd0df2a7366a9b72732d4978b2794cbeb8cd32.sig
            crane digest localhost:5000/alpine-cves
            crane digest localhost:5000/alpine-cves:sha256-eece025e432126ce23f223450a0326fbebde39cdf496a85d8c016293fc851978.att

            cosign tree localhost:5000/wolfi-base:latest
            cosign tree localhost:5000/alpine-cves
            cosign verify localhost:5000/wolfi-base@sha256:4d31ef1460be2813657ce7ab3cfd0df2a7366a9b72732d4978b2794cbeb8cd32 --certificate-identity=puerco@chainguard.dev --certificate-oidc-issuer=https://accounts.google.com
        
        - name: Run Tests
          run: |
            go test -v ./...