build_and_push_go_lib.yml

name: CI/CT workflow for packaged Go libraries

on:
  workflow_dispatch:
    
jobs:
  ci-ct-job-for-go-libraries:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Setup Go 1.21.3 🐹
        uses: actions/setup-go@v4
        with:
          go-version: '1.21.3'
      - name: Go mod tidy 🐹
        run: |
          target_folders=$(find . -type f -name '*.mod' -exec dirname {} \;)

          for dir_name in $target_folders; do
              absolute_path=$(realpath "$dir_name")
              (cd "$absolute_path" && go mod tidy)
          done
        working-directory: ./libraries/go/common-lib/test
      - name: Go test 🐹
        run: |
          target_folders=$(find . -type f -name '*.mod' -exec dirname {} \;)

          for dir_name in $target_folders; do
              absolute_path=$(realpath "$dir_name")
              (cd "$absolute_path" && go test)
          done
        working-directory: ./libraries/go/common-lib/test
      - name: Run Snyk to check for vulnerabilities in the source code 🔍/🛡️
        uses: snyk/actions/golang@master
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
        with:
          args: $(find ./libraries/go/common-lib/src -type f -name '*.mod' -exec dirname {} \;) --orgs=${{ secrets.SNYK_ORGANIZATION_ID }} --severity-threshold=high
      - name: Create go package 📦
        run: |
          sudo apt-get install -y zip

          #export BUILD_VERSION="0.1.0-dev${{ github.run_number }}"
          export BUILD_VERSION="0.1.0"
          target_folders=$(find . -type f -name '*.mod' -exec dirname {} \;)

          for dir_name in $target_folders; do
              absolute_path=$(realpath "$dir_name")
              modified_dir_name=${dir_name//\//-}
              modified_dir_name=${modified_dir_name:2}
              echo $modified_dir_name
              (cd "$absolute_path" && rm -rf .git/ go.sum && go mod tidy && find -type f | while read f; do zip common-lib-${modified_dir_name}-v${BUILD_VERSION}.zip "$f"; done)
          done
        working-directory: ./libraries/go/common-lib/src/
      - name: Install CloudSmith dependencies
        run: |
          sudo apt-get install -y python3 python3-pip
          sudo pip3 install --upgrade cloudsmith-cli

      # When working with public go modules, consider utilizing git tags as proposed here: https://go.dev/doc/modules/publishing, https://go.dev/doc/modules/version-numbers
      # Difficult setup with CloudSmith in current folder structure for the go sample library. See: https://help.cloudsmith.io/docs/go-registry
      # - name: Push go modules package 📦 to CloudSmith. The uniqueness of the package version is essential. 
      #         # To achieve this, the Git run number will serve as the revision number. 
      #         # (Specifically development and quality assurance (QA) packages shall utilize revision numbers. Release packages not)
      #   run: |
      #     #export BUILD_VERSION="0.1.0-dev${{ github.run_number }}"
      #     export BUILD_VERSION="0.1.0"
      #     target_folders=$(find . -type f -name '*.mod' -exec dirname {} \;)

      #     for dir_name in $target_folders; do
      #         absolute_path=$(realpath "$dir_name")
      #         modified_dir_name=${dir_name//\//-}
      #         modified_dir_name=${modified_dir_name:2}
      #         echo $modified_dir_name
      #         (cd "$absolute_path" && cloudsmith push go ${{ secrets.CLOUDSMITH_REPOSITORY }} -k ${{ secrets.CLOUDSMITH_API_KEY }} common-lib-${modified_dir_name}-v${BUILD_VERSION}.zip)
      #     done  
      #   working-directory: ./libraries/go/common-lib/src/