forked from redaxo/redaxo
-
Notifications
You must be signed in to change notification settings - Fork 0
144 lines (121 loc) · 5.52 KB
/
static-analysis.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
name: Static Analysis
on:
push:
branches: [main, bugfix, temp]
pull_request:
types: [opened, synchronize, reopened, ready_for_review]
env:
writable: ${{ github.event_name != 'push' && github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]' && 1 || 0 }}
permissions:
contents: read
jobs:
psalm-analysis:
name: psalm static code analysis
runs-on: ubuntu-latest
timeout-minutes: 30
permissions:
contents: write # for stefanzweifel/git-auto-commit-action to push code in repo
steps:
- name: Checkout
uses: actions/checkout@v3
if: env.writable == 1
with:
ref: ${{ github.head_ref }}
token: ${{ secrets.BOT_TOKEN }}
- name: Checkout fork
uses: actions/checkout@v3
if: env.writable == 0
- name: Setup PHP
uses: shivammathur/setup-php@v2
with:
php-version: '8.2'
extensions: gd, intl, imagick
coverage: none # disable xdebug, pcov
- name: Composer install
uses: ramsey/composer-install@v2
with:
composer-options: --ansi --prefer-dist
- name: Run psalm analysis
run: vendor/bin/psalm --show-info=false --shepherd --diff --output-format=github
- name: Check psalm baseline and show type coverage
id: baseline
run: |
vendor/bin/psalm --set-baseline=.tools/psalm/baseline.xml --stats
git diff --exit-code .tools/psalm/baseline.xml || (echo "::error file=.tools/psalm/baseline.xml,line=1,col=1::Psalm baseline file is outdated and must be regenerated via \`composer psalm-baseline\`." && exit 1)
- name: Commit changed files
uses: stefanzweifel/git-auto-commit-action@v4
if: failure() && steps.baseline.conclusion != 'skipped' && env.writable == 1
with:
commit_message: Update psalm baseline
commit_user_name: rex-bot
commit_user_email: [email protected]
file_pattern: .tools/psalm/baseline.xml
psalm-taint-analysis:
name: psalm taint analysis
runs-on: ubuntu-latest
timeout-minutes: 30
if: github.event.pull_request.draft == false
permissions:
contents: write # for stefanzweifel/git-auto-commit-action to push code in repo
steps:
- name: Checkout
uses: actions/checkout@v3
if: env.writable == 1
with:
ref: ${{ github.head_ref }}
token: ${{ secrets.BOT_TOKEN }}
- name: Checkout fork
uses: actions/checkout@v3
if: env.writable == 0
- name: Setup PHP
uses: shivammathur/setup-php@v2
with:
php-version: '8.2'
extensions: gd, intl, imagick
coverage: none # disable xdebug, pcov
- name: Composer install
uses: ramsey/composer-install@v2
with:
composer-options: --ansi --prefer-dist
- name: Run psalm taint analysis
run: vendor/bin/psalm --use-baseline=.tools/psalm/baseline-taint.xml --taint-analysis --no-cache
- name: Check psalm baseline
id: baseline
run: |
composer taint-baseline
git diff --exit-code .tools/psalm/baseline-taint.xml || (echo "::error file=.tools/psalm/baseline-taint.xml,line=1,col=1::Psalm taint baseline file is outdated and must be regenerated via \`composer taint-baseline\`." && exit 1)
- name: Commit changed files
uses: stefanzweifel/git-auto-commit-action@v4
if: failure() && steps.baseline.conclusion != 'skipped' && env.writable == 1
with:
commit_message: Update psalm taint baseline
commit_user_name: rex-bot
commit_user_email: [email protected]
file_pattern: .tools/psalm/baseline-taint.xml
phpstan-analysis:
name: phpstan static code analysis
runs-on: ubuntu-latest
timeout-minutes: 30
permissions:
contents: write # for Git to git apply
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup PHP
uses: shivammathur/setup-php@v2
with:
php-version: '8.2'
extensions: gd, intl, imagick, pdo_mysql
coverage: none # disable xdebug, pcov
- name: Composer install
uses: ramsey/composer-install@v2
with:
composer-options: --ansi --prefer-dist
- name: Setup REDAXO
run: |
sudo /etc/init.d/mysql start
mysql -uroot -h127.0.0.1 -proot -e 'create database redaxo5;'
git apply .github/workflows/default.config.yml.github-action.diff
php .tools/bin/setup
- name: Run phpstan analysis
run: vendor/bin/phpstan analyse --ansi