[Snyk] Fix for 1 vulnerabilities #733
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build from tarball | |
| on: | |
| pull_request: | |
| types: [opened, synchronize, reopened, ready_for_review] | |
| paths-ignore: | |
| - .mailmap | |
| - '**.md' | |
| - AUTHORS | |
| - doc/** | |
| - .github/** | |
| - '!.github/workflows/build-tarball.yml' | |
| push: | |
| branches: | |
| - main | |
| - v[0-9]+.x-staging | |
| - v[0-9]+.x | |
| paths-ignore: | |
| - .mailmap | |
| - '**.md' | |
| - AUTHORS | |
| - doc/** | |
| - .github/** | |
| - '!.github/workflows/build-tarball.yml' | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} | |
| cancel-in-progress: true | |
| env: | |
| PYTHON_VERSION: '3.11' | |
| FLAKY_TESTS: keep_retrying | |
| permissions: | |
| contents: read | |
| jobs: | |
| build-tarball: | |
| if: github.event.pull_request.draft == false | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Python ${{ env.PYTHON_VERSION }} | |
| uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4.6.1 | |
| with: | |
| python-version: ${{ env.PYTHON_VERSION }} | |
| - name: Environment Information | |
| run: npx envinfo | |
| - name: Make tarball | |
| run: | | |
| export DISTTYPE=nightly | |
| export DATESTRING=`date "+%Y-%m-%d"` | |
| export COMMIT=$(git rev-parse --short=10 "$GITHUB_SHA") | |
| ./configure && make tar -j8 SKIP_XZ=1 | |
| mkdir tarballs | |
| mv *.tar.gz tarballs | |
| - name: Upload tarball artifact | |
| uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2 | |
| with: | |
| name: tarballs | |
| path: tarballs | |
| test-tarball-linux: | |
| needs: build-tarball | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Python ${{ env.PYTHON_VERSION }} | |
| uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4.6.1 | |
| with: | |
| python-version: ${{ env.PYTHON_VERSION }} | |
| - name: Environment Information | |
| run: npx envinfo | |
| - name: Download tarball | |
| uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 | |
| with: | |
| name: tarballs | |
| path: tarballs | |
| - name: Extract tarball | |
| run: | | |
| tar xzf tarballs/*.tar.gz -C $RUNNER_TEMP | |
| echo "TAR_DIR=$RUNNER_TEMP/`basename tarballs/*.tar.gz .tar.gz`" >> $GITHUB_ENV | |
| - name: Copy directories needed for testing | |
| run: | | |
| cp -r tools/node_modules $TAR_DIR/tools | |
| cp -r tools/eslint-rules $TAR_DIR/tools | |
| - name: Build | |
| run: | | |
| cd $TAR_DIR | |
| make build-ci -j2 V=1 | |
| - name: Test | |
| run: | | |
| cd $TAR_DIR | |
| make run-ci -j2 V=1 TEST_CI_ARGS="-p dots --measure-flakiness 9" |