-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #95 from kununu/KUNENABLE-161
KUNENABLE-161 Add support for Symfony 6.4 to kununu/elasticsearch-bundle
- Loading branch information
Showing
75 changed files
with
1,057 additions
and
955 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,81 +1,84 @@ | ||
name: Continuous Integration | ||
|
||
on: | ||
push: | ||
branches: | ||
- master | ||
- 6.0 | ||
- 5.0 | ||
- 4.0 | ||
- 3.0 | ||
- 2.5 | ||
pull_request: | ||
types: [ opened, synchronize, reopened ] | ||
push: | ||
branches: | ||
- master | ||
- '6.0' | ||
- '5.0' | ||
- '4.0' | ||
- '3.0' | ||
- '2.5' | ||
|
||
pull_request: | ||
types: [ opened, synchronize, reopened ] | ||
|
||
env: | ||
fail-fast: true | ||
fail-fast: true | ||
|
||
jobs: | ||
build: | ||
name: PHPUnit | ||
runs-on: ubuntu-20.04 | ||
strategy: | ||
matrix: | ||
php-version: | ||
- 8.0 | ||
dependencies: | ||
- lowest | ||
- highest | ||
build: | ||
name: PHPUnit | ||
runs-on: ubuntu-22.04 | ||
strategy: | ||
matrix: | ||
php-version: | ||
- 8.1 | ||
- 8.2 | ||
- 8.3 | ||
dependencies: | ||
- lowest | ||
- highest | ||
|
||
steps: | ||
- name: Checkout | ||
uses: actions/checkout@v2 | ||
steps: | ||
- name: Checkout | ||
uses: actions/checkout@v4 | ||
|
||
- name: Setup PHP | ||
uses: shivammathur/setup-php@v2 | ||
with: | ||
php-version: ${{ matrix.php-version }} | ||
coverage: xdebug | ||
extensions: ${{ matrix.extensions }} | ||
- name: Setup PHP | ||
uses: shivammathur/setup-php@v2 | ||
with: | ||
php-version: ${{ matrix.php-version }} | ||
coverage: xdebug | ||
extensions: ${{ matrix.extensions }} | ||
|
||
- name: Install Composer Dependencies | ||
uses: ramsey/composer-install@v1 | ||
with: | ||
dependency-versions: ${{ matrix.dependencies }} | ||
composer-options: "--prefer-stable" | ||
- name: Install Composer Dependencies | ||
uses: ramsey/composer-install@v3 | ||
with: | ||
dependency-versions: ${{ matrix.dependencies }} | ||
composer-options: "--prefer-stable" | ||
|
||
- name: Run PHPUnit | ||
run: vendor/bin/phpunit | ||
- name: Run PHPUnit | ||
run: vendor/bin/phpunit | ||
|
||
- name: Upload coverage files | ||
uses: actions/upload-artifact@v2 | ||
with: | ||
name: ${{ github.job }}-${{ matrix.php-version }}-coverage | ||
path: tests/.results/ | ||
- name: Upload coverage files | ||
uses: actions/upload-artifact@v4 | ||
with: | ||
name: ${{ github.job }}-${{ matrix.php-version }}-${{ matrix.dependencies }}-coverage | ||
path: tests/.results/ | ||
|
||
sonarcloud: | ||
needs: build | ||
runs-on: ubuntu-latest | ||
steps: | ||
- uses: actions/checkout@v2 | ||
with: | ||
# Disabling shallow clone is recommended for improving relevancy of reporting | ||
fetch-depth: 0 | ||
sonarcloud: | ||
needs: build | ||
runs-on: ubuntu-latest | ||
steps: | ||
- uses: actions/checkout@v4 | ||
with: | ||
# Disabling shallow clone is recommended for improving relevancy of reporting | ||
fetch-depth: 0 | ||
|
||
- uses: actions/download-artifact@v2 | ||
with: | ||
name: build-8-coverage | ||
path: tests/.results/ | ||
- uses: actions/download-artifact@v4 | ||
with: | ||
name: build-8.1-highest-coverage | ||
path: tests/.results/ | ||
|
||
- name: Fix Code Coverage Paths | ||
working-directory: tests/.results/ | ||
run: | | ||
sed -i 's@'$GITHUB_WORKSPACE'@/github/workspace/@g' tests-clover.xml | ||
sed -i 's@'$GITHUB_WORKSPACE'@/github/workspace/@g' tests-junit.xml | ||
- name: Fix Code Coverage Paths | ||
working-directory: tests/.results/ | ||
run: | | ||
sed -i 's@'$GITHUB_WORKSPACE'@/github/workspace/@g' tests-clover.xml | ||
sed -i 's@'$GITHUB_WORKSPACE'@/github/workspace/@g' tests-junit.xml | ||
- name: SonarCloud Scan | ||
uses: sonarsource/sonarcloud-github-action@master | ||
env: | ||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | ||
- name: SonarCloud Scan | ||
uses: sonarsource/sonarcloud-github-action@master | ||
env: | ||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,20 +1,24 @@ | ||
# Security Policy | ||
|
||
## For external contributors | ||
|
||
## Reporting a Vulnerability | ||
If you want to report any security vulnerabilities please do so by creating an [issue](https://github.com/kununu/elasticsearch/issues). | ||
Additionally, if you have a fix then please create a pull request and link it to the issue you have created. | ||
|
||
Jira is our entrypoint to report security vulnerabilities. Having this mind a KUNSECU user story (type Vulnerability) needs to be created. | ||
## For kununu developers | ||
|
||
### How to fill the user story? | ||
### Reporting a Vulnerability | ||
|
||
Follow this [documentation](https://confluence.xing.hh/pages/viewpage.action?pageId=381133070). | ||
Jira is our entrypoint to report security vulnerabilities. Having this mind a KUNSECU user story (type Vulnerability) needs to be created. | ||
|
||
#### How to fill the user story? | ||
|
||
### To which team do I assign the user story? | ||
Follow this [documentation](https://new-work.atlassian.net/wiki/spaces/kununu/pages/47846323/Vulnerability+Issue+Type+Jira). | ||
|
||
Follow the [component ownership matrix](https://confluence.xing.hh/display/kununu/Component+ownership+and+support) and assign it to the corresponding team. | ||
#### To which team do I assign the user story? | ||
|
||
Follow the [domain ownership matrix](https://new-work.atlassian.net/wiki/spaces/kununu/pages/113148000/Domain+ownership+matrix) and assign it to the corresponding team. | ||
|
||
## Reporting the update of dependencies | ||
|
||
This is the benefit of having Dependabot. It will open pull requests for security and version updates. For more information check the Github [documentation](https://docs.github.com/en/github/administering-a-repository/managing-pull-requests-for-dependency-updates). | ||
This is the benefit of having Dependabot. It will open pull requests for security and version updates. For more information check the GitHub [documentation](https://docs.github.com/en/github/administering-a-repository/managing-pull-requests-for-dependency-updates). |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.