Nightly #13

	name: Nightly
	on:
	workflow_dispatch: {} # Allow for manual triggers
	schedule:
	- cron: '0 8 * * 0-4' # Sun-Thu, at 8:00 UTC

	permissions:
	contents: read

	jobs:
	govulncheck:
	name: Go vulnerability check
	runs-on: ubuntu-24.04
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	- id: go_version
	name: Read go version
	run: echo "go_version=$(cat .go-version)" >> $GITHUB_OUTPUT

	- name: Install Go (${{ steps.go_version.outputs.go_version }})
	uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
	with:
	go-version: ${{ steps.go_version.outputs.go_version }}

	- run: go install golang.org/x/vuln/cmd/govulncheck@latest
	- run: govulncheck ./...

	test-opa-main:
	name: Test with OPA main
	runs-on: ubuntu-24.04
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	- id: go_version
	name: Read go version
	run: echo "go_version=$(cat .go-version)" >> $GITHUB_OUTPUT

	- name: Install Go (${{ steps.go_version.outputs.go_version }})
	uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
	with:
	go-version: ${{ steps.go_version.outputs.go_version }}

	- name: Update OPA to main
	run: \|
	go get github.com/open-policy-agent/opa@main
	go mod tidy

	- run: make build
	- run: make test
	- name: e2e tests
	run: \|
	set -euo pipefail
	matches=(opactl_*)
	export OPACTL="$(pwd)/${matches[0]}"
	$OPACTL version
	go test -tags=e2e ./e2e/... -v

Provide feedback