manual cherry checkout from auditing branch #2

	name: Podman Check

	on:
	push:
	branches:
	- main
	paths:
	- 'Makefile'
	- 'dependencies.Dockerfile'
	- 'internal/tools/**'
	pull_request:
	paths:
	- 'Makefile'
	- 'dependencies.Dockerfile'
	- 'internal/tools/**'

	permissions:
	contents: read

	jobs:

	# The "Checks" workflow (checks.yml) already runs every check under docker, so
	# the only thing not covered elsewhere is running the containerized weaver/opa
	# tooling invoked from the Makefile under podman. Verify that here.
	make-container-targets-podman:
	runs-on: ubuntu-latest
	steps:
	- name: install podman and podman-docker
	run: sudo apt-get install -y podman podman-docker

	- name: check out code
	uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false

	- name: install dependencies
	run: npm ci --ignore-scripts

	- name: invoke make
	run: make table-generation registry-generation check-policies

Navigation Menu