OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	08/12/2024 10:34:28 AM	rwxr-xr-x
📄 continuous-integration.yml	4.21 KB	08/12/2024 10:34:28 AM	rw-r--r--
📄 merge-me.yml	614 bytes	08/12/2024 10:34:28 AM	rw-r--r--

Editing: continuous-integration.yml

# GitHub Actions Documentation: https://docs.github.com/en/actions

name: "build"

on:
  push:
    branches:
      - "main"
    tags:
      - "*"
  pull_request:
    branches:
      - "main"

# Cancels all previous workflow runs for the same branch that have not yet completed.
concurrency:
  # The concurrency group contains the workflow name and the branch name.
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  COMPOSER_ROOT_VERSION: "1.99.99"

jobs:
  coding-standards:
    name: "Coding standards"
    runs-on: "ubuntu-latest"
    steps:
      - name: "Checkout repository"
        uses: "actions/checkout@v3.2.0"

- name: "Install PHP"
        uses: "shivammathur/setup-php@2.22.0"
        with:
          php-version: "latest"
          coverage: "none"

- name: "Install dependencies (Composer)"
        uses: "ramsey/composer-install@2.2.0"

- name: "Check syntax (php-parallel-lint)"
        run: "composer dev:lint:syntax"

- name: "Check coding standards (PHP_CodeSniffer)"
        run: "composer dev:lint:style"

static-analysis:
    name: "Static analysis"
    runs-on: "ubuntu-latest"

steps:
      - name: "Checkout repository"
        uses: "actions/checkout@v3.2.0"

- name: "Install PHP"
        uses: "shivammathur/setup-php@2.22.0"
        with:
          php-version: "latest"
          coverage: "none"

- name: "Install dependencies (Composer)"
        uses: "ramsey/composer-install@2.2.0"

- name: "Statically analyze code (PHPStan)"
        run: "composer dev:analyze:phpstan"

- name: "Statically analyze code (Psalm)"
        run: "composer dev:analyze:psalm -- --shepherd"

security-analysis:
    name: "Security analysis"
    needs: ["coding-standards", "static-analysis"]
    runs-on: "ubuntu-latest"

steps:
      - name: "Checkout repository"
        uses: "actions/checkout@v3.2.0"

- name: "Install PHP"
        uses: "shivammathur/setup-php@2.22.0"
        with:
          php-version: "latest"
          coverage: "none"

- name: "Install dependencies (Composer)"
        uses: "ramsey/composer-install@2.2.0"

- name: "Analyze security of code (Psalm)"
        run: "./vendor/bin/psalm --taint-analysis --report=build/logs/psalm.sarif"

- name: "Upload security analysis results to GitHub"
        uses: "github/codeql-action/upload-sarif@v2"
        with:
          sarif_file: "build/logs/psalm.sarif"

code-coverage:
    name: "Code coverage"
    needs: ["coding-standards", "static-analysis"]
    runs-on: "ubuntu-latest"

steps:
      - name: "Checkout repository"
        uses: "actions/checkout@v3.2.0"

- name: "Install PHP"
        uses: "shivammathur/setup-php@2.22.0"
        with:
          php-version: "latest"
          coverage: "pcov"
          ini-values: "memory_limit=-1"

- name: "Install dependencies (Composer)"
        uses: "ramsey/composer-install@2.2.0"

- name: "Run unit tests (PHPUnit)"
        run: "composer dev:test:coverage:ci"

- name: "Publish coverage report to Codecov"
        uses: "codecov/codecov-action@v3.1.1"

unit-tests:
    name: "Unit tests"
    needs: ["code-coverage"]
    runs-on: "ubuntu-latest"

strategy:
      fail-fast: false
      matrix:
        php:
          - "8.1"
          - "8.2"
        composer-deps: ["lowest", "highest"]

steps:
      - name: "Checkout repository"
        uses: "actions/checkout@v3.2.0"

- name: "Install PHP"
        uses: "shivammathur/setup-php@2.22.0"
        with:
          php-version: "${{ matrix.php }}"
          coverage: "none"

- name: "Install dependencies (Composer)"
        uses: "ramsey/composer-install@2.2.0"
        with:
          dependency-versions: "${{ matrix.composer-deps }}"

- name: "Run unit tests (PHPUnit)"
        if: "${{ matrix.composer-deps == 'highest' }}"
        run: "composer dev:test:unit"

- name: "Run unit tests, with deprecation notices turned off (PHPUnit)"
        if: "${{ matrix.composer-deps == 'lowest' }}"
        run: "composer dev:test:unit -- -d 'error_reporting=E_ALL & ~E_DEPRECATED'"