Bump ossf/scorecard-action from 2.3.3 to 2.4.0 #28
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Integrate" | |
| on: | |
| push: | |
| branches: | |
| - "*.x" | |
| pull_request: null | |
| jobs: | |
| byte_level: | |
| name: "0️⃣ Byte-level" | |
| runs-on: "ubuntu-latest" | |
| steps: | |
| - name: "Checkout code" | |
| uses: "actions/checkout@v4" | |
| - name: "Check file permissions" | |
| run: | | |
| test "$(find . -type f -not -path './.git/*' -executable)" == "" | |
| - name: "Find non-printable ASCII characters" | |
| run: | | |
| ! LC_ALL=C.UTF-8 find . -type f -name "*.php" ! -name "*Test.php" -print0 | xargs -0 -- grep -PHn "[^ -~]" | |
| syntax_errors: | |
| name: "1️⃣ Syntax errors" | |
| runs-on: "ubuntu-latest" | |
| steps: | |
| - name: "Set up PHP" | |
| uses: "shivammathur/setup-php@v2" | |
| with: | |
| php-version: "8.3" | |
| tools: castor | |
| - name: "Checkout code" | |
| uses: "actions/checkout@v4" | |
| - name: "Install dependencies" | |
| uses: "ramsey/composer-install@v3" | |
| with: | |
| dependency-versions: "highest" | |
| - name: "Check source code for syntax errors" | |
| run: "composer exec -- parallel-lint src/ tests/" | |
| unit_tests: | |
| name: "2️⃣ Unit and functional tests" | |
| needs: | |
| - "byte_level" | |
| - "syntax_errors" | |
| strategy: | |
| matrix: | |
| operating-system: | |
| - "ubuntu-latest" | |
| php-version: | |
| - "8.1" | |
| - "8.2" | |
| - "8.3" | |
| dependencies: | |
| - "lowest" | |
| - "highest" | |
| runs-on: ${{ matrix.operating-system }} | |
| steps: | |
| - name: "Set up PHP" | |
| uses: "shivammathur/setup-php@v2" | |
| with: | |
| php-version: "${{ matrix.php-version }}" | |
| extensions: "json, mbstring, openssl, sqlite3, curl, uuid" | |
| coverage: "xdebug" | |
| tools: castor | |
| - name: "Checkout code" | |
| uses: "actions/checkout@v4" | |
| - name: "Install dependencies" | |
| uses: "ramsey/composer-install@v3" | |
| with: | |
| dependency-versions: "${{ matrix.dependencies }}" | |
| composer-options: "--optimize-autoloader" | |
| - name: "Execute unit tests" | |
| run: "castor test --coverage-text" | |
| static_analysis: | |
| name: "3️⃣ Static Analysis" | |
| needs: | |
| - "byte_level" | |
| - "syntax_errors" | |
| runs-on: "ubuntu-latest" | |
| steps: | |
| - name: "Set up PHP" | |
| uses: "shivammathur/setup-php@v2" | |
| with: | |
| php-version: "8.3" | |
| extensions: "json, mbstring, openssl, sqlite3, curl, uuid" | |
| tools: castor | |
| - name: "Checkout code" | |
| uses: "actions/checkout@v4" | |
| - name: "Validate Composer configuration" | |
| run: "composer validate --strict" | |
| - name: "Install dependencies" | |
| uses: "ramsey/composer-install@v3" | |
| with: | |
| dependency-versions: "highest" | |
| composer-options: "--optimize-autoloader" | |
| - name: "Execute static analysis" | |
| run: "castor stan" | |
| coding_standards: | |
| name: "4️⃣ Coding Standards" | |
| needs: | |
| - "byte_level" | |
| - "syntax_errors" | |
| runs-on: "ubuntu-latest" | |
| steps: | |
| - name: "Set up PHP" | |
| uses: "shivammathur/setup-php@v2" | |
| with: | |
| php-version: "8.3" | |
| extensions: "json, mbstring, openssl, sqlite3, curl, uuid" | |
| tools: castor | |
| - name: "Checkout code" | |
| uses: "actions/checkout@v4" | |
| - name: "Check adherence to EditorConfig" | |
| uses: "greut/eclint-action@v0" | |
| - name: "Install dependencies" | |
| uses: "ramsey/composer-install@v3" | |
| with: | |
| dependency-versions: "highest" | |
| composer-options: "--optimize-autoloader" | |
| - name: "Check coding style" | |
| run: "castor cs" | |
| rector_checkstyle: | |
| name: "6️⃣ Rector Checkstyle" | |
| needs: | |
| - "byte_level" | |
| - "syntax_errors" | |
| runs-on: "ubuntu-latest" | |
| steps: | |
| - name: "Set up PHP" | |
| uses: "shivammathur/setup-php@v2" | |
| with: | |
| php-version: "8.3" | |
| extensions: "json, mbstring, openssl, sqlite3, curl, uuid" | |
| tools: castor | |
| coverage: "xdebug" | |
| - name: "Checkout code" | |
| uses: "actions/checkout@v4" | |
| - name: "Fetch Git base reference" | |
| run: "git fetch --depth=1 origin ${GITHUB_BASE_REF}" | |
| - name: "Install dependencies" | |
| uses: "ramsey/composer-install@v3" | |
| with: | |
| dependency-versions: "highest" | |
| composer-options: "--optimize-autoloader" | |
| - name: "Execute Rector" | |
| run: "castor rector" | |
| exported_files: | |
| name: "7️⃣ Exported files" | |
| needs: | |
| - "byte_level" | |
| - "syntax_errors" | |
| runs-on: "ubuntu-20.04" | |
| steps: | |
| - name: "Checkout code" | |
| uses: "actions/checkout@v4" | |
| - name: "Check exported files" | |
| run: | | |
| EXPECTED="LICENSE,composer.json" | |
| CURRENT="$(git archive HEAD | tar --list --exclude="src" --exclude="src/*" | paste -s -d ",")" | |
| echo "CURRENT =${CURRENT}" | |
| echo "EXPECTED=${EXPECTED}" | |
| test "${CURRENT}" == "${EXPECTED}" |