use go modules dependency management (#19)

Co-authored-by: Petra Scherer <scherer@synyx.de>
Co-authored-by: Timo Klenk <klenk@synyx.de>
Signed-off-by: Johannes Graf <graf@synyx.de>

.github/workflows/build-and-test.yaml

@@ -53,7 +53,7 @@ jobs:
     runs-on: ubuntu-20.04
     env:
       GOPATH: ${{ github.workspace }}
-      GO111MODULE: off
+      GO111MODULE: on
       REGISTRY: ghcr.io
     defaults:
       run:
@@ -75,6 +75,9 @@ jobs:
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
           restore-keys: |
             ${{ runner.os }}-go-
+      - name: Perform Build
+        run: |
+          go build ./...
       - name: Perform Tests
         run: |
           go test ./... -coverprofile coverage.txt.tmp && cat coverage.txt.tmp | grep -Ev "fake|helper" > coverage.txt

.github/workflows/publish-and-release.yaml

@@ -99,7 +99,7 @@ jobs:
     needs: [prepare,draft-release]
     env:
       GOPATH: ${{ github.workspace }}
-      GO111MODULE: off
+      GO111MODULE: on
       REGISTRY: ghcr.io
       VERSION: "${{ needs.prepare.outputs.VERSION }}"
     defaults:

.gitignore

@@ -8,6 +8,7 @@ target/
 
 ### Go
 cover.*
+/vendor/*
 
 ### Helm
 /charts/*.tgz

create-sbom.sh

@@ -6,6 +6,28 @@
 # SPDX-License-Identifier: Apache-2.0
 #
 
+#
+# check that required tools are installed
+#
+if ! command -v jq &> /dev/null
+then
+    echo "jq could not be found! See https://stedolan.github.io/jq/download/"
+    exit 1
+fi
+if ! command -v license-detector &> /dev/null
+then
+    echo "license-detector could not be found! See https://github.com/go-enry/go-license-detector"
+    exit 1
+fi
+if ! command -v sponge &> /dev/null
+then
+    echo "sponge could not be found! See https://command-not-found.com/sponge"
+    exit 1
+fi
+
+# download go dependencies into vendor directory - so we have all required license files
+go mod vendor
+
 # Traverses the vendor folder and collects license information in the 3RD-PARTY-LICENSES/sbom.json file. License and
 # notice files are copied to the respective subfolder in the 3RD-PARTY-LICENSES folder.
 SBOM_FILE="3RD-PARTY-LICENSES/sbom.json"

go.mod

@@ -0,0 +1,56 @@
+module github.com/carbynestack/ephemeral
+
+go 1.13
+
+require (
+	cloud.google.com/go v0.41.0 // indirect
+	github.com/appscode/jsonpatch v0.0.0-20190108182946-7c0e3b262f30 // indirect
+	github.com/asaskevich/govalidator v0.0.0-20180315120708-ccb8e960c48f
+	github.com/coreos/prometheus-operator v0.26.0 // indirect
+	github.com/emicklei/go-restful v2.9.6+incompatible // indirect
+	github.com/evanphx/json-patch v4.5.0+incompatible // indirect
+	github.com/ghodss/yaml v1.0.0 // indirect
+	github.com/go-logr/logr v0.1.0 // indirect
+	github.com/go-logr/zapr v0.1.1 // indirect
+	github.com/go-openapi/spec v0.19.2
+	github.com/gogo/protobuf v1.2.1 // indirect
+	github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6 // indirect
+	github.com/golang/protobuf v1.3.2
+	github.com/google/gofuzz v1.0.0 // indirect
+	github.com/google/tcpproxy v0.0.0-20180808230851-dfa16c61dad2
+	github.com/google/uuid v1.1.1
+	github.com/googleapis/gnostic v0.3.0 // indirect
+	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
+	github.com/hpcloud/tail v1.0.1-0.20180514194441-a1dbeea552b7 // indirect
+	github.com/imdario/mergo v0.3.7 // indirect
+	github.com/knative/pkg v0.0.0-20190627143708-1864f499dcaa
+	github.com/mailru/easyjson v0.0.0-20190620125010-da37f6c1e481 // indirect
+	github.com/onsi/ginkgo v1.8.0
+	github.com/onsi/gomega v1.5.0
+	github.com/operator-framework/operator-sdk v0.6.0
+	github.com/pborman/uuid v0.0.0-20180906182336-adf5a7427709 // indirect
+	github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
+	github.com/pkg/errors v0.8.1 // indirect
+	github.com/prometheus/common v0.6.0 // indirect
+	github.com/prometheus/procfs v0.0.3 // indirect
+	github.com/spf13/pflag v1.0.3
+	github.com/vardius/message-bus v1.1.4
+	go.uber.org/atomic v1.4.0 // indirect
+	go.uber.org/multierr v1.1.0 // indirect
+	go.uber.org/zap v1.10.0
+	golang.org/x/crypto v0.0.0-20190621222207-cc06ce4a13d4 // indirect
+	google.golang.org/genproto v0.0.0-20191009194640-548a555dbc03 // indirect
+	google.golang.org/grpc v1.24.0
+	gopkg.in/fsnotify/fsnotify.v1 v1.4.7 // indirect
+	gopkg.in/inf.v0 v0.9.1 // indirect
+	k8s.io/api v0.0.0-20181213150558-05914d821849
+	k8s.io/apiextensions-apiserver v0.0.0-20181213153335-0fe22c71c476 // indirect
+	k8s.io/apimachinery v0.0.0-20181127025237-2b1284ed4c93
+	k8s.io/client-go v0.0.0-20181213151034-8d9ed539ba31
+	k8s.io/klog v0.3.3 // indirect
+	k8s.io/kube-openapi v0.0.0-20180711000925-0cf8f7e6ed1d
+	knative.dev/pkg v0.0.0-20190627143708-1864f499dcaa
+	sigs.k8s.io/controller-runtime v0.1.10
+	sigs.k8s.io/testing_frameworks v0.1.2 // indirect
+	sigs.k8s.io/yaml v1.1.0 // indirect
+)