ConductorOne · mateoHernandez123 · Aug 4, 2025 · Aug 4, 2025
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
@@ -3,9 +3,6 @@
 - [ ] Bug fix
 - [ ] New feature
 
-
-
-
 #### Useful links:
 
 - [Baton SDK coding guidelines](https://github.com/ConductorOne/baton-sdk/wiki/Coding-Guidelines)

diff --git a/.github/workflows/capabilities_and_config.yaml b/.github/workflows/capabilities_and_config.yaml
@@ -0,0 +1,40 @@
+name: Generate capabilities and config schema
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  calculate-capabilities:
+    if: github.actor != 'github-actions[bot]'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.RELENG_GITHUB_TOKEN }}
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: "go.mod"
+
+      - name: Build
+        run: go build -o connector ./cmd/baton-miro
+
+      - name: Run and save config output
+        run: ./connector config > config_schema.json
+
+      - name: Run and save capabilities output
+        run: ./connector capabilities > baton_capabilities.json
+
+      - name: Commit changes
+        uses: EndBug/add-and-commit@v9
+        with:
+          default_author: github_actions
+          message: "Updating baton config schema and capabilities."
+          add: |
+            config_schema.json
+            baton_capabilities.json
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -4,39 +4,38 @@ jobs:
   go-lint:
     runs-on: ubuntu-latest
     steps:
-    - name: Install Go
-      uses: actions/setup-go@v5
-      with:
-        go-version: 1.23.x
-    - name: Checkout code
-      uses: actions/checkout@v4
-    - name: Run linters
-      uses: golangci/golangci-lint-action@v8
-      with:
-        version: latest
-        args: --timeout=3m
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.23.x
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Run linters
+        uses: golangci/golangci-lint-action@v8
+        with:
+          version: latest
+          args: --timeout=3m
   go-test:
     strategy:
       matrix:
-        go-version: [ 1.23.x ]
-        platform: [ ubuntu-latest ]
+        go-version: [1.23.x]
+        platform: [ubuntu-latest]
     runs-on: ${{ matrix.platform }}
     steps:
-    - name: Install Go
-      if: success()
-      uses: actions/setup-go@v5
-      with:
-        go-version: ${{ matrix.go-version }}
-    - name: Checkout code
-      uses: actions/checkout@v4
-    - name: go tests
-      run: (set -o pipefail && go test -v -covermode=count -json ./... | tee test.json)
-    - name: annotate go tests
-      if: always()
-      uses: guyarb/golang-test-annotations@v0.5.1
-      with:
-        test-results: test.json
-
+      - name: Install Go
+        if: success()
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ matrix.go-version }}
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: go tests
+        run: (set -o pipefail && go test -v -covermode=count -json ./... | tee test.json)
+      - name: annotate go tests
+        if: always()
+        uses: guyarb/golang-test-annotations@v0.6.0
+        with:
+          test-results: test.json
 #  test:
 #    runs-on: ubuntu-latest
 #    # Define any services needed for the test suite (or delete this section)

diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
@@ -2,40 +2,40 @@ name: main ci
 on:
   push:
     branches:
-    - main
+      - main
 jobs:
   go-lint:
     runs-on: ubuntu-latest
     steps:
-    - name: Install Go
-      uses: actions/setup-go@v5
-      with:
-        go-version: 1.23.x
-    - name: Checkout code
-      uses: actions/checkout@v4
-    - name: Run linters
-      uses: golangci/golangci-lint-action@v8
-      with:
-        version: latest
-        args: --timeout=3m
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.23.x
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Run linters
+        uses: golangci/golangci-lint-action@v8
+        with:
+          version: latest
+          args: --timeout=3m
   go-test:
     strategy:
       matrix:
-        go-version: [ 1.23.x ]
-        platform: [ ubuntu-latest ]
+        go-version: [1.23.x]
+        platform: [ubuntu-latest]
     runs-on: ${{ matrix.platform }}
     steps:
-    - name: Install Go
-      if: success()
-      uses: actions/setup-go@v5
-      with:
-        go-version: ${{ matrix.go-version }}
-    - name: Checkout code
-      uses: actions/checkout@v4
-    - name: go tests
-      run: (set -o pipefail && go test -v -covermode=count -json ./... | tee test.json)
-    - name: annotate go tests
-      if: always()
-      uses: guyarb/golang-test-annotations@v0.5.1
-      with:
-        test-results: test.json
+      - name: Install Go
+        if: success()
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ matrix.go-version }}
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: go tests
+        run: (set -o pipefail && go test -v -covermode=atomic -json -race ./... | tee test.json)
+      - name: annotate go tests
+        if: always()
+        uses: guyarb/golang-test-annotations@v0.6.0
+        with:
+          test-results: test.json
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -3,59 +3,17 @@ name: Release
 on:
   push:
     tags:
-    - '*'
+      - "*"
 
 jobs:
-  goreleaser:
-    runs-on: macos-latest
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v4
-      with:
-        fetch-depth: 0
-    - name: Set up Go
-      uses: actions/setup-go@v5
-      with:
-        go-version: 1.23.x
-    - name: Set up Gon
-      run: brew tap conductorone/gon && brew install conductorone/gon/gon
-    - name: Import Keychain Certs
-      uses: apple-actions/import-codesign-certs@v1
-      with:
-        p12-file-base64: ${{ secrets.APPLE_SIGNING_KEY_P12 }}
-        p12-password: ${{ secrets.APPLE_SIGNING_KEY_P12_PASSWORD }}
-    - name: Run GoReleaser
-      uses: goreleaser/goreleaser-action@v6
-      with:
-        version: "~> v2"
-        args: release --clean
-      env:
-        GITHUB_TOKEN: ${{ secrets.RELENG_GITHUB_TOKEN }}
-        AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
-        AC_PROVIDER: ${{ secrets.AC_PROVIDER }}
-  goreleaser-docker:
-    runs-on: ubuntu-latest
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v4
-      with:
-        fetch-depth: 0
-    - name: Set up Go
-      uses: actions/setup-go@v5
-      with:
-        go-version: 1.23.x
-    - name: Docker Login
-      uses: docker/login-action@v1
-      with:
-        registry: ghcr.io
-        username: ${{ github.repository_owner }}
-        password: ${{ secrets.RELENG_GITHUB_TOKEN }}
-    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v1
-    - name: Run GoReleaser
-      uses: goreleaser/goreleaser-action@v6
-      with:
-        version: "~> v2"
-        args: release --clean -f .goreleaser.docker.yaml
-      env:
-        GITHUB_TOKEN: ${{ secrets.RELENG_GITHUB_TOKEN }}
+  release:
+    uses: ConductorOne/github-workflows/.github/workflows/release.yaml@v2
+    with:
+      tag: ${{ github.ref_name }}
+    secrets:
+      RELENG_GITHUB_TOKEN: ${{ secrets.RELENG_GITHUB_TOKEN }}
+      APPLE_SIGNING_KEY_P12: ${{ secrets.APPLE_SIGNING_KEY_P12 }}
+      APPLE_SIGNING_KEY_P12_PASSWORD: ${{ secrets.APPLE_SIGNING_KEY_P12_PASSWORD }}
+      AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
+      AC_PROVIDER: ${{ secrets.AC_PROVIDER }}
+      DATADOG_API_KEY: ${{ secrets.DATADOG_API_KEY }}
diff --git a/baton-logo.png b/baton-logo.png
diff --git a/go.mod b/go.mod
@@ -3,7 +3,7 @@ module github.com/conductorone/baton-sql
 go 1.24
 
 require (
-	github.com/conductorone/baton-sdk v0.3.7
+	github.com/conductorone/baton-sdk v0.3.28
 	github.com/elliotchance/phpserialize v1.4.0
 	github.com/ennyjfrick/ruleguard-logfatal v0.0.2
 	github.com/go-sql-driver/mysql v1.9.2
@@ -124,6 +124,7 @@ require (
 	golang.org/x/oauth2 v0.29.0 // indirect
 	golang.org/x/sync v0.13.0 // indirect
 	golang.org/x/sys v0.32.0 // indirect
+	golang.org/x/term v0.31.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20250414145226-207652e42e2e // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250414145226-207652e42e2e // indirect
 	google.golang.org/grpc v1.71.1 // indirect

diff --git a/go.sum b/go.sum
@@ -74,8 +74,8 @@ github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyY
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
-github.com/conductorone/baton-sdk v0.3.7 h1:A6GNQtzsqPrupGsdFxA1/1kV4dMrGpP9n1r3Ahqpsjw=
-github.com/conductorone/baton-sdk v0.3.7/go.mod h1:lWZHgu025Rsgs5jvBrhilGti0zWF2+YfaFY/bWOS/g0=
+github.com/conductorone/baton-sdk v0.3.28 h1:tvOpgWr9MjBaG/eXj17oGl9EGGe1/yC5MMQTCcfQPhI=
+github.com/conductorone/baton-sdk v0.3.28/go.mod h1:L55WO3ERMx1mfpjDgwK3jWNRGRF2E76WrQHmW6ev8VY=
 github.com/conductorone/dpop v0.2.4 h1:PaiDOX1gAIXtOJPxXf08GsGkpCuT/iECEjSJzLpi0zU=
 github.com/conductorone/dpop v0.2.4/go.mod h1:gyo8TtzB9SCFCsjsICH4IaLZ7y64CcrDXMOPBwfq/3s=
 github.com/conductorone/dpop/integrations/dpop_grpc v0.2.4 h1:lYxYi9/WTSL9sE96CO0QF2BY3kehs8dTTApI134TGCA=

diff --git a/pkg/bcel/bcel_test.go b/pkg/bcel/bcel_test.go
@@ -1,7 +1,6 @@
 package bcel
 
 import (
-	"context"
 	"fmt"
 	"testing"
 
@@ -11,7 +10,7 @@ import (
 )
 
 func TestTemplateEnv_Evaluate(tt *testing.T) {
-	ctx := context.Background()
+	ctx := tt.Context()
 
 	for _, fn := range functions.GetAllFunctions() {
 		for _, op := range fn.Overloads {

diff --git a/pkg/bsql/entitlements.go b/pkg/bsql/entitlements.go
@@ -19,7 +19,7 @@ func (s *SQLSyncer) Entitlements(ctx context.Context, resource *v2.Resource, pTo
 	return s.dynamicEntitlements(ctx, resource, pToken)
 }
 
-func (s *SQLSyncer) staticEntitlements(ctx context.Context, resource *v2.Resource, pToken *pagination.Token) ([]*v2.Entitlement, string, annotations.Annotations, error) {
+func (s *SQLSyncer) staticEntitlements(ctx context.Context, resource *v2.Resource, _ *pagination.Token) ([]*v2.Entitlement, string, annotations.Annotations, error) {
 	inputs := s.env.SyncInputsWithResource(nil, resource)
 
 	var ret []*v2.Entitlement

diff --git a/pkg/bsql/provisioning.go b/pkg/bsql/provisioning.go
@@ -150,7 +150,7 @@ func (s *SQLSyncer) prepareProvisioningVars(ctx context.Context, vars map[string
 	return ret, nil
 }
 
-func (s *SQLSyncer) prepareSchemaVars(ctx context.Context, accountProvisioning *AccountProvisioning, accountInfo *v2.AccountInfo) (map[string]any, error) {
+func (s *SQLSyncer) prepareSchemaVars(accountProvisioning *AccountProvisioning, accountInfo *v2.AccountInfo) (map[string]any, error) {
 	inputs := make(map[string]any)
 
 	for _, field := range accountProvisioning.Schema {