Files
engine/.github/workflows/tests.yml
Benjamin Chastanier c8d409c4a8 sec: add a security-audit workflow in CI
This CL introduces:
- adds a security audit check in CI workflow aiming to check any security issues in packages.
- updates packages versions
2021-06-11 14:00:11 +02:00

79 lines
2.9 KiB
YAML

name: tests
on:
push:
branches-ignore: [ main, dev ]
pull_request:
branches-ignore: [ main, dev ]
jobs:
security_audit:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v1
- uses: actions-rs/audit-check@v1
with:
token: ${{ secrets.GITHUB_TOKEN }}
build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions-rs/toolchain@v1
with:
toolchain: stable
- name: build
run: |
export PATH=$GITHUB_WORKSPACE/bin:$PATH
export RUSTC_WRAPPER=$GITHUB_WORKSPACE/bin/sccache
export SCCACHE_REDIS=${{ secrets.SCCACHE_REDIS }}
mkdir -p $GITHUB_WORKSPACE/bin
sccache_release=$(curl --silent "https://github.com/Qovery/sccache-bin/releases/latest" | sed -r 's/^.+tag\/(.+)">.+/\1/')
curl -sLo $GITHUB_WORKSPACE/bin/sccache https://github.com/Qovery/sccache-bin/releases/download/${sccache_release}/sccache
chmod 755 $GITHUB_WORKSPACE/bin/sccache
echo "########## SHARED CACHE STATUS ##########"
sccache --version
sccache --show-stats
echo "########## LINTER ##########"
cargo fmt --all -- --check --color=always || (echo "Use cargo fmt to format your code"; exit 1)
RUSTFLAGS="--deny warnings" cargo check || (echo "Solve your warnings to continue"; exit 1)
echo "########## START BUILD ##########"
cargo build --all-features
sccache --show-stats
echo "########## START UNIT TESTS ##########"
cargo test
selected-functionnal-tests:
runs-on: ubuntu-latest
if: github.event.pull_request.draft == false
needs: build
steps:
- uses: actions/checkout@v1
- name: Run selected functional tests
timeout-minutes: 120
env:
GITLAB_PROJECT_ID: ${{ secrets.GITLAB_PROJECT_ID }}
GITLAB_TOKEN: ${{ secrets.GITLAB_TOKEN }}
GITLAB_PERSONAL_TOKEN: ${{ secrets.GITLAB_PERSONAL_TOKEN }}
run: |
branch=$(echo ${{github.ref}} | sed -r 's/^refs\/heads\/(.+)/\1/')
echo "Branch name: $branch"
export GITHUB_BRANCH=$branch
export GITHUB_COMMIT_ID=$GITHUB_SHA
./helper.sh autodetect
all-tests-enabled:
runs-on: ubuntu-latest
needs: build
steps:
- uses: actions/checkout@v1
- name: Only validate PR if all tests have been requested
timeout-minutes: 120
env:
GITLAB_PROJECT_ID: ${{ secrets.GITLAB_PROJECT_ID }}
GITLAB_TOKEN: ${{ secrets.GITLAB_TOKEN }}
GITLAB_PERSONAL_TOKEN: ${{ secrets.GITLAB_PERSONAL_TOKEN }}
run: |
branch=$(echo ${{github.ref}} | sed -r 's/^refs\/heads\/(.+)/\1/')
echo "Branch name: $branch"
export GITHUB_BRANCH=$branch
export GITHUB_COMMIT_ID=$GITHUB_SHA
./helper.sh check_gh_tags