mirror of
https://github.com/FreshRSS/FreshRSS.git
synced 2026-09-22 02:56:31 -04:00
Inverle
6625137a8e
* Add zizmor workflow for action security checks https://docs.zizmor.sh/integrations/#github-actions https://github.com/zizmorcore/zizmor-action To avoid pushing unsafe actions and also for performing the scan automatically on each zizmor upgrade, in case there are any new unsafe behaviors to find. * Zizmor fixes * Set dependabot cooldowns to 7 days * Fix workflow concurrency and improve code quality * Use pedantic persona in zizmor workflow
131 lines
3.8 KiB
YAML
131 lines
3.8 KiB
YAML
name: Automated tests
|
|
|
|
on:
|
|
push:
|
|
branches: [ edge ]
|
|
pull_request:
|
|
branches: [ edge ]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: tests-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
|
|
tests:
|
|
name: tests
|
|
# https://github.com/actions/virtual-environments
|
|
runs-on: ubuntu-26.04
|
|
|
|
steps:
|
|
- name: Git checkout source code
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
persist-credentials: false
|
|
|
|
# Composer tests
|
|
|
|
- name: Check PHP syntax
|
|
run: composer run-script php-lint
|
|
|
|
- name: Check PHTML syntax
|
|
run: composer run-script phtml-lint
|
|
|
|
- name: Check translations syntax
|
|
run: composer run-script translations && git diff --exit-code
|
|
|
|
- name: Use Composer cache
|
|
id: composer-cache
|
|
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
|
|
with:
|
|
path: vendor
|
|
key: ${{ runner.os }}-php-${{ hashFiles('**/composer.lock') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-php-
|
|
|
|
- name: Run Composer install
|
|
run: composer install --prefer-dist --no-progress
|
|
if: steps.composer-cache.outputs.cache-hit != 'true'
|
|
|
|
- name: Run PHP unit tests
|
|
run: composer run-script phpunit -- --no-progress
|
|
|
|
- name: PHP_CodeSniffer
|
|
run: composer run-script phpcs
|
|
|
|
- name: PHPStan
|
|
run: composer run-script phpstan -- --no-progress
|
|
|
|
# - name: PHPStan Next
|
|
# run: composer run-script phpstan-next -- --no-progress
|
|
|
|
# NPM tests
|
|
|
|
- name: Uses Node.js
|
|
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
|
|
with:
|
|
# https://nodejs.org/en/about/previous-releases
|
|
node-version: lts/*
|
|
cache: npm
|
|
|
|
- run: npm ci
|
|
|
|
- name: Check JavaScript syntax
|
|
run: npm run --silent eslint
|
|
|
|
- name: Check Markdown syntax
|
|
run: npm run --silent markdownlint
|
|
|
|
- name: Check CSS syntax
|
|
run: npm run --silent stylelint
|
|
|
|
- name: Check Right-to-left CSS
|
|
run: npm run --silent rtlcss && git diff --exit-code
|
|
|
|
# Shell tests
|
|
|
|
- name: Use shell cache
|
|
id: shell-cache
|
|
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
|
|
with:
|
|
path: bin
|
|
key: ${{ runner.os }}-bin-shfmt@v3.8.0-hadolint@v2.15.1-typos@v1.49.0
|
|
|
|
- name: Add ./bin/ to $PATH
|
|
run: mkdir -p bin/ && echo "${PWD}/bin" >> $GITHUB_PATH
|
|
|
|
- name: Install shfmt
|
|
if: steps.shell-cache.outputs.cache-hit != 'true'
|
|
run: GOBIN=${PWD}/bin/ go install mvdan.cc/sh/v3/cmd/shfmt@v3.8.0
|
|
|
|
- name: Check shell script syntax
|
|
# shellcheck is pre-installed https://github.com/actions/virtual-environments/blob/main/images/linux/Ubuntu2204-Readme.md
|
|
run: ./tests/shellchecks.sh
|
|
|
|
- name: Install hadolint
|
|
if: steps.shell-cache.outputs.cache-hit != 'true'
|
|
run: |
|
|
curl -sL -o ./bin/hadolint "https://github.com/hadolint/hadolint/releases/download/v2.15.1/hadolint-linux-x86_64" &&
|
|
echo 'c7187db94eeeeca956519a6af171adc31453941a1e777961f6e680f697c8c507 ./bin/hadolint' | sha256sum -c - &&
|
|
chmod 700 ./bin/hadolint
|
|
|
|
- name: Check Dockerfile syntax
|
|
run: find . -name 'Dockerfile*' -print0 | xargs -0 -n1 ./bin/hadolint --failure-threshold warning
|
|
|
|
- name: Install typos
|
|
if: steps.shell-cache.outputs.cache-hit != 'true'
|
|
run: |
|
|
cd bin ;
|
|
wget -q 'https://github.com/crate-ci/typos/releases/download/v1.49.0/typos-v1.49.0-x86_64-unknown-linux-musl.tar.gz' &&
|
|
echo '48bd2d58e02ce713b8c0f1aa239e68ee4f7d8c551013135806e6aed3938d9e10 typos-v1.49.0-x86_64-unknown-linux-musl.tar.gz' | sha256sum -c - &&
|
|
tar -xvf *.tar.gz './typos' &&
|
|
chmod +x typos &&
|
|
rm *.tar.gz ;
|
|
cd ..
|
|
|
|
- name: Check spelling
|
|
run: bin/typos
|