Skip to content

Harden GitHub workflows #467

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
samdark wants to merge 1 commit into
base: master
Choose a base branch
from
+35 −14
Open

Harden GitHub workflows #467

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 8 additions & 4 deletions .github/workflows/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,8 @@ on:

name: build

permissions:
contents: read
jobs:
codeception:
name: PHP ${{ matrix.php }}-${{ matrix.os }}
Expand All @@ -45,18 +47,20 @@ jobs:

steps:
- name: Checkout.
uses: actions/checkout@v4
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
with:
persist-credentials: false

- name: Install PHP with extensions.
uses: shivammathur/setup-php@v2
uses: shivammathur/setup-php@b604ade2a87db23f8871b7182e69ec5e75effb45
with:
coverage: false
extensions: fileinfo, intl
ini-values: date.timezone='UTC', register_argc_argv=On
php-version: ${{ matrix.php }}

- name: Install Composer dependencies
uses: ramsey/composer-install@v3
uses: ramsey/composer-install@a8d0d959dab41457692a5e2041bd9b757a119e3f

- name: Run codeception build.
run: vendor/bin/codecept build
Expand All @@ -72,7 +76,7 @@ jobs:

- name: Upload coverage to Codecov.
if: matrix.os == 'ubuntu-latest'
uses: codecov/codecov-action@v4
uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238
with:
token: ${{ secrets.CODECOV_TOKEN }}
files: runtime/tests/_output/coverage.xml
10 changes: 7 additions & 3 deletions .github/workflows/composer-dependency-analyzer.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,8 @@ on:

name: Composer dependency analyzer

permissions:
contents: read
jobs:
analyzer:
name: PHP ${{ matrix.php }}-${{ matrix.os }}
Expand All @@ -40,17 +42,19 @@ jobs:

steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
with:
persist-credentials: false

- name: Install PHP with extensions
uses: shivammathur/setup-php@v2
uses: shivammathur/setup-php@b604ade2a87db23f8871b7182e69ec5e75effb45
with:
coverage: none
php-version: ${{ matrix.php }}
tools: composer:v2, cs2pr

- name: Install Composer dependencies
uses: ramsey/composer-install@v3
uses: ramsey/composer-install@a8d0d959dab41457692a5e2041bd9b757a119e3f

- name: Run composer dependency analyzer
run: vendor/bin/composer-dependency-analyser --config=composer-dependency-analyser.php
17 changes: 13 additions & 4 deletions .github/workflows/cs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,33 +13,42 @@ on:
- 'rector.php'
- 'yii'

permissions:
contents: read
jobs:
cs-fix:
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- name: Checkout code
uses: actions/checkout@v6
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
with:
persist-credentials: false

- name: Install PHP
uses: shivammathur/setup-php@v2
uses: shivammathur/setup-php@b604ade2a87db23f8871b7182e69ec5e75effb45
with:
php-version: 8.4
tools: composer:v2
coverage: none

- name: Install Composer dependencies
uses: "ramsey/composer-install@v4"
uses: ramsey/composer-install@26d8a556604053a9612623447203a691f406fbe6

- name: Run PHP CS Fixer
run: ./vendor/bin/php-cs-fixer fix --config=.php-cs-fixer.php

- name: Run Rector
run: ./vendor/bin/rector --output-format=github

- name: Configure Git credentials
env:
GH_TOKEN: ${{ github.token }}
run: git config --global credential.helper '!f() { echo username=x-access-token; echo password=$GH_TOKEN; }; f'

- name: Commit changes
uses: stefanzweifel/git-auto-commit-action@v7
uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9
with:
commit_message: "Apply PHP CS Fixer and Rector changes (CI)"
file_pattern: '*.php'
Expand Down
10 changes: 7 additions & 3 deletions .github/workflows/static.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,8 @@ on:

name: static analysis

permissions:
contents: read
jobs:
psalm:
name: PHP ${{ matrix.php }}-${{ matrix.os }}
Expand All @@ -37,17 +39,19 @@ jobs:

steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
with:
persist-credentials: false

- name: Install PHP with extensions
uses: shivammathur/setup-php@v2
uses: shivammathur/setup-php@b604ade2a87db23f8871b7182e69ec5e75effb45
with:
coverage: none
php-version: ${{ matrix.php }}
tools: composer:v2, cs2pr

- name: Install Composer dependencies
uses: ramsey/composer-install@v3
uses: ramsey/composer-install@a8d0d959dab41457692a5e2041bd9b757a119e3f

- name: Static analysis
run: vendor/bin/psalm --shepherd --stats --output-format=checkstyle --no-cache --php-version=${{ matrix.php }} | cs2pr --graceful-warnings --colorize
Loading