feat: Use go mod cache for proto files instead of manual repo clone

Replace manual proto file copying from ../stackrox repository with automated
approach using Go mod cache, following the stackrox repository pattern.

Changes:
- Update setup-proto-files.sh to use `go list -f '{{.Dir}}' -m` for module discovery
- Get proto files from github.com/stackrox/rox module
- Get scanner protos from github.com/stackrox/scanner module
- Add Makefile targets: proto-setup, proto-generate, proto-clean, proto-check
- Simplify GitHub Actions workflow (removed external repo checkout)
- Update documentation to reflect new approach
- Add proto-version.sh script for version tracking

Benefits:
- No external repository dependencies
- Works automatically in CI/CD environments
- Version-locked to go.mod for reproducibility
- Handles read-only mod cache files with chmod

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: janisz

.github/workflows/wiremock-test.yml

@@ -42,23 +42,8 @@ jobs:
       - name: Download Go dependencies
         run: go mod download
 
-      - name: Checkout StackRox proto files
-        uses: actions/checkout@v4
-        with:
-          repository: stackrox/stackrox
-          path: stackrox-repo
-          sparse-checkout: |
-            proto
-            third_party/googleapis
-            qa-tests-backend/src/main/proto/scanner
-
-      - name: Copy proto files
-        run: |
-          mkdir -p wiremock/proto/stackrox wiremock/proto/googleapis
-          cp -r stackrox-repo/proto/* wiremock/proto/stackrox/
-          cp -r stackrox-repo/third_party/googleapis/* wiremock/proto/googleapis/
-          mkdir -p wiremock/proto/stackrox/scanner/api/v1
-          cp stackrox-repo/qa-tests-backend/src/main/proto/scanner/api/v1/*.proto wiremock/proto/stackrox/scanner/api/v1/ || true
+      - name: Setup proto files from go mod cache
+        run: ./scripts/setup-proto-files.sh
 
       - name: Run smoke test
         run: ./scripts/smoke-test-wiremock.sh

Makefile

@@ -83,12 +83,33 @@ lint: ## Run golangci-lint
 	go install -v "github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.6"
 	golangci-lint run
 
+.PHONY: proto-setup
+proto-setup: ## Setup proto files from go mod cache
+	@./scripts/setup-proto-files.sh
+
+.PHONY: proto-generate
+proto-generate: ## Generate proto descriptors for WireMock
+	@./scripts/generate-proto-descriptors.sh
+
+.PHONY: proto-clean
+proto-clean: ## Clean generated proto files
+	@rm -rf wiremock/proto/ wiremock/grpc/
+
+.PHONY: proto-check
+proto-check: ## Verify proto setup is correct
+	@if [ ! -f wiremock/proto/descriptors/stackrox.pb ]; then \
+		echo "❌ Proto descriptors not found"; \
+		echo "Run: make proto-generate"; \
+		exit 1; \
+	fi
+	@echo "✓ Proto descriptors present"
+
 .PHONY: mock-download
 mock-download: ## Download WireMock JARs
 	@./scripts/download-wiremock.sh
 
 .PHONY: mock-start
-mock-start: ## Start WireMock mock Central locally
+mock-start: proto-check ## Start WireMock mock Central locally
 	@./scripts/start-mock-central.sh
 
 .PHONY: mock-stop

scripts/generate-proto-descriptors.sh

@@ -8,10 +8,10 @@ GRPC_DIR="wiremock/grpc"
 
 mkdir -p "$DESCRIPTOR_DIR" "$GRPC_DIR"
 
+# Ensure proto files are present
 if [ ! -d "$ROX_PROTO_PATH" ]; then
-    echo "Error: Proto files not found at $ROX_PROTO_PATH"
-    echo "Run: ./scripts/setup-proto-files.sh"
-    exit 1
+    echo "Proto files not found. Running setup..."
+    ./scripts/setup-proto-files.sh
 fi
 
 if ! command -v protoc &> /dev/null; then

scripts/proto-version.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+# Display the version of stackrox modules being used for protos
+
+set -e
+
+ROX_VERSION=$(go list -f '{{.Version}}' -m github.com/stackrox/rox)
+ROX_DIR=$(go list -f '{{.Dir}}' -m github.com/stackrox/rox)
+echo "StackRox proto files from github.com/stackrox/rox@$ROX_VERSION"
+echo "  Location: $ROX_DIR"
+
+SCANNER_VERSION=$(go list -f '{{.Version}}' -m github.com/stackrox/scanner)
+SCANNER_DIR=$(go list -f '{{.Dir}}' -m github.com/stackrox/scanner)
+echo ""
+echo "Scanner proto files from github.com/stackrox/scanner@$SCANNER_VERSION"
+echo "  Location: $SCANNER_DIR"

scripts/setup-proto-files.sh

@@ -1,33 +1,39 @@
 #!/bin/bash
 set -e
 
-STACKROX_REPO=""
-
-if [ -d "../stackrox" ]; then
-    STACKROX_REPO="../stackrox"
-elif [ -d "../../stackrox" ]; then
-    STACKROX_REPO="../../stackrox"
-elif [ -n "$STACKROX_REPO_PATH" ]; then
-    STACKROX_REPO="$STACKROX_REPO_PATH"
-fi
+echo "Setting up proto files from go modules..."
+
+# Ensure go modules are downloaded
+go mod download
 
-if [ -z "$STACKROX_REPO" ] || [ ! -d "$STACKROX_REPO" ]; then
-    echo "Error: StackRox repository not found"
-    echo "Set STACKROX_REPO_PATH or clone to ../stackrox"
+# Discover rox module location using go list
+ROX_DIR=$(go list -f '{{.Dir}}' -m github.com/stackrox/rox)
+
+if [ -z "$ROX_DIR" ]; then
+    echo "Error: github.com/stackrox/rox module not found"
+    echo "Run: go mod download"
     exit 1
 fi
 
-echo "Copying proto files from $STACKROX_REPO..."
+echo "Using proto files from: $ROX_DIR"
 
+# Create target directories
 mkdir -p wiremock/proto/stackrox wiremock/proto/googleapis
 
-cp -r "$STACKROX_REPO/proto/"* wiremock/proto/stackrox/
-cp -r "$STACKROX_REPO/third_party/googleapis/"* wiremock/proto/googleapis/
+# Copy proto files from rox module
+# Note: Files from go mod cache are read-only, so we copy and chmod
+cp -r "$ROX_DIR/proto/"* wiremock/proto/stackrox/
+cp -r "$ROX_DIR/third_party/googleapis/"* wiremock/proto/googleapis/
 
-mkdir -p wiremock/proto/stackrox/scanner/api/v1
-if [ -d "$STACKROX_REPO/qa-tests-backend/src/main/proto/scanner/api/v1" ]; then
-    cp "$STACKROX_REPO/qa-tests-backend/src/main/proto/scanner/api/v1/"*.proto wiremock/proto/stackrox/scanner/api/v1/
+# Copy scanner protos from scanner module (following stackrox pattern)
+SCANNER_DIR=$(go list -f '{{.Dir}}' -m github.com/stackrox/scanner)
+if [ -n "$SCANNER_DIR" ] && [ -d "$SCANNER_DIR/proto/scanner" ]; then
+    echo "Using scanner proto files from: $SCANNER_DIR"
+    cp -r "$SCANNER_DIR/proto/scanner" wiremock/proto/stackrox/
 fi
 
-echo "✓ Proto files copied"
+# Make files writable (go mod cache files are read-only)
+chmod -R u+w wiremock/proto/
+
+echo "✓ Proto files copied from go mod cache"
 echo "Next: ./scripts/generate-proto-descriptors.sh"

wiremock/README.md

@@ -38,15 +38,17 @@ This downloads:
 - `wiremock-standalone.jar` (~17MB)
 - `wiremock-grpc-extension.jar` (~24MB)
 
-### 2. Copy Proto Files
+### 2. Setup Proto Files
 
-Copy proto files from the stackrox repository:
+Proto files are automatically obtained from the `github.com/stackrox/rox` Go module dependency:
 
 ```bash
+make proto-setup
+# or directly:
 ./scripts/setup-proto-files.sh
 ```
 
-This requires the stackrox repo cloned as a sibling directory or set via `STACKROX_REPO_PATH`.
+This downloads the module (if needed) and copies proto files from the Go mod cache to `wiremock/proto/`.
 
 ### 3. Generate Proto Descriptors