ci: add appsec system-tests to the ci #651
Open
+38
−0
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What does this PR do?
This PR adds the AppSec integration tests suite to the CI on each PR and on main. To do so, we reuse the workflow from the system-tests repo and provide the current dev version of the library through an artifact.
Motivation
The goal is to catch regressions regarding AppSec in AWS Lambda by running the integration tests suite.
Testing Guidelines
The workflow runs successfully in this PR: https://github.com/DataDog/datadog-lambda-python/actions/runs/17149705700
Additional Notes
The implementation of the lambda test environment in the system test was done in this PR: [python_lambda] Add scenario for testing the python tracer for AWS Lambda system-tests#4891
The workflow is documented here: https://github.com/DataDog/system-tests/blob/main/docs/CI/github-actions.md
Contrary to the
Build Layers for system-tests
workflow (used for the system-test nightly runs), we don't patch theddtrace
version and keep the one used by the rest of the CI. (It wouldn't make sense to block this repo because of unreleased change on the dd-trace-py side)This causes an extra build of the layer. I don't think there is an obvious way to reuse an existing one.
Types of Changes
Check all that apply