test before release

Signed-off-by: Sunny Yip <[email protected]>

.github/workflows/test.yaml

@@ -0,0 +1,41 @@
+name: Build and Test
+
+on:
+  workflow_dispatch:
+  push:
+    # branches:
+    #   - main
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
+
+      - name: clone guac-data
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
+        with:
+          repository: 'guacsec/guac-data'
+          ref: 'main'
+          path: 'guac-data'
+
+      - name: ingest to guac
+        uses: ./
+        continue-on-error: true
+        with:
+          files: ./guac-data/docs/spdx/spdx_vuln.json
+          # files: ./guac-data/top-dh-sboms
+          client-id: ${{ secrets.GUAC_CLIENT_ID }}
+          client-secret: ${{ secrets.GUAC_CLIENT_SECRET }}
+          api-addr: https://ingesttest.api.dev.kusari.cloud
+          # token-url: https://auth.dev.kusari.cloud/oauth2/token
+
+      - name: last step
+        shell: bash
+        run: |
+          echo "This runs after GUAC ingestion"

Dockerfile

@@ -1,2 +1,2 @@
-#v0.7.2
-FROM ghcr.io/kusaridev/kusari-uploader@sha256:52bcbf878fe8fd8827b7a61185c3f6b58ff37016608406a900ba4646d25cee6e
+#v0.7.2 - multi-arch
+FROM ghcr.io/kusaridev/kusari-uploader@sha256:6da882fadbbffebbd33a996447d591f0b33fb2a72a47e6584bf5ea35f974250f