mirror of
https://github.com/elastic/detection-rules
synced 2026-06-08 14:00:08 +00:00
Eric Forte
5a4d781939
* Add permissions blocks to workflows * Add cosmetic read blocks for consistency Co-authored-by: Arpit Jain <3242828+arpitjain099@users.noreply.github.com>
74 lines
2.3 KiB
YAML
74 lines
2.3 KiB
YAML
name: Unit Tests
|
|
|
|
on:
|
|
push:
|
|
branches: [ "main", "7.*", "8.*", "9.*" ]
|
|
pull_request:
|
|
branches: [ "*" ]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
build:
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: Fetch main branch
|
|
run: |
|
|
git fetch origin main:refs/remotes/origin/main
|
|
|
|
- name: Set up Python 3.13
|
|
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
|
|
with:
|
|
python-version: '3.13'
|
|
|
|
- name: Install dependencies
|
|
run: |
|
|
python -m pip install --upgrade pip
|
|
pip cache purge
|
|
pip install .[dev]
|
|
pip install lib/kibana
|
|
pip install lib/kql
|
|
|
|
- name: Unit tests
|
|
env:
|
|
# only run the test test_rule_change_has_updated_date on pull request events to main
|
|
GITHUB_EVENT_NAME: "${{ github.event_name}}"
|
|
# only run remote validation if repo is set to do so otherwise defer to .github/workflows/esql-validation.yml
|
|
DR_REMOTE_ESQL_VALIDATION: "${{ vars.remote_esql_validation }}"
|
|
DR_CLOUD_ID: ${{ secrets.dr_cloud_id }}
|
|
DR_KIBANA_URL: ${{ secrets.dr_cloud_id }}
|
|
DR_ELASTICSEARCH_URL: ${{ secrets.dr_cloud_id }}
|
|
DR_API_KEY: ${{ secrets.dr_api_key }}
|
|
DR_IGNORE_SSL_ERRORS: ${{ secrets.dr_cloud_id }}
|
|
run: |
|
|
python -m detection_rules test
|
|
|
|
- name: Build release package
|
|
env:
|
|
# only generate the navigator files on push events to main
|
|
GENERATE_NAVIGATOR_FILES: "${{ github.event_name == 'push' && github.ref == 'refs/heads/main' && '--generate-navigator' || ' ' }}"
|
|
run: |
|
|
python -m detection_rules dev build-release $GENERATE_NAVIGATOR_FILES
|
|
|
|
- name: Archive production artifacts for branch builds
|
|
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
|
|
if: |
|
|
github.event_name == 'push'
|
|
with:
|
|
name: release-files
|
|
path: |
|
|
releases
|
|
|
|
- name: Update navigator gist files
|
|
env:
|
|
GITHUB_TOKEN: "${{ secrets.WRITE_TRADEBOT_GIST_TOKEN }}"
|
|
if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
|
|
run: python -m detection_rules dev update-navigator-gists
|