Repository navigation

Feat/dpop public client #49

	name: Go Integration Tests

	# Runs the tests the shared Go CI workflow cannot: those that need
	# PostgreSQL (concurrency guarantees, PostgreSQL-only schema, migrations)
	# and the SpiceDB provider tests behind the integration build tag, which
	# hold both authorization providers to the base schema.

	on:
	push:
	branches:
	- main
	paths:
	- '**.go'
	- '**.sql'
	- 'go.mod'
	- 'go.sum'
	- '.github/workflows/go-integration.yaml'
	tags:
	- 'v*'
	pull_request:
	branches:
	- main
	paths:
	- '**.go'
	- '**.sql'
	- 'go.mod'
	- 'go.sum'
	- '.github/workflows/go-integration.yaml'
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	postgres:
	name: PostgreSQL
	runs-on: ubuntu-latest
	services:
	postgres:
	image: postgres:17
	env:
	POSTGRES_USER: postgres
	POSTGRES_PASSWORD: postgres
	POSTGRES_DB: postgres
	ports:
	- 5432:5432
	options: >-
	--health-cmd "pg_isready -U postgres"
	--health-interval 5s
	--health-timeout 5s
	--health-retries 10
	env:
	SF_TEST_PG_DSN: postgres://postgres:postgres@localhost:5432/postgres?sslmode=disable
	SF_TEST_PG_REQUIRED: "1"
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Setup Go
	uses: actions/setup-go@v7
	with:
	go-version-file: go.mod
	cache: true

	- name: Run tests with PostgreSQL
	run: go test -race -timeout=15m ./...

	spicedb:
	name: SpiceDB
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Setup Go
	uses: actions/setup-go@v7
	with:
	go-version-file: go.mod
	cache: true

	- name: Run SpiceDB provider tests (embedded SpiceDB)
	run: go test -tags=integration -race -timeout=10m ./authz/...