Create codeql analysis workflow #3256
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Main Workflow | |
| on: ["pull_request"] | |
| jobs: | |
| run: | |
| name: Run | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| php-version: [ 7.3, 8.2 ] | |
| steps: | |
| - name: Setup PHP | |
| uses: shivammathur/setup-php@v2 | |
| with: | |
| php-version: ${{ matrix.php-version }} | |
| tools: composer:v2 | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| # Disabling shallow clone to improve relevancy of SonarCloud reporting | |
| fetch-depth: 0 | |
| - name: Validate composer.json and composer.lock | |
| run: composer validate --strict | |
| - name: Install dependencies | |
| run: composer install --prefer-dist --no-progress | |
| - name: Run integration tests | |
| run: vendor/bin/phpunit --testsuite=integration --no-coverage | |
| env: | |
| INTEGRATION_USERNAME: ${{ secrets.INTEGRATION_USERNAME }} | |
| INTEGRATION_PASSWORD: ${{ secrets.INTEGRATION_PASSWORD }} | |
| INTEGRATION_X_API_KEY: ${{ secrets.INTEGRATION_X_API_KEY }} | |
| INTEGRATION_MERCHANT_ACCOUNT: ${{ secrets.INTEGRATION_MERCHANT_ACCOUNT }} | |
| INTEGRATION_DONATION_ACCOUNT: ${{ secrets.INTEGRATION_DONATION_ACCOUNT }} | |
| INTEGRATION_SKIN_CODE: ${{ secrets.INTEGRATION_SKIN_CODE }} | |
| INTEGRATION_HMAC_SIGNATURE: ${{ secrets.INTEGRATION_HMAC_SIGNATURE }} | |
| INTEGRATION_STORE_PAYOUT_USERNAME: ${{ secrets.INTEGRATION_STORE_PAYOUT_USERNAME }} | |
| INTEGRATION_STORE_PAYOUT_PASSWORD: ${{ secrets.INTEGRATION_STORE_PAYOUT_PASSWORD }} | |
| INTEGRATION_REVIEW_PAYOUT_USERNAME: ${{ secrets.INTEGRATION_REVIEW_PAYOUT_USERNAME }} | |
| INTEGRATION_REVIEW_PAYOUT_PASSWORD: ${{ secrets.INTEGRATION_REVIEW_PAYOUT_PASSWORD }} | |
| - name: Run unit tests | |
| run: vendor/bin/phpunit --testsuite=unit --coverage-clover build/clover.xml --log-junit build/tests-log.xml | |
| # PHPUnit generates absolute file paths and SonarCloud expects relative file paths. This command removes the | |
| # current working directory from the report files. | |
| - name: Clean up reports | |
| run: sed -i "s;`pwd`/;;g" build/*.xml | |
| - name: Run PHP Code Sniffer | |
| run: vendor/bin/phpcs --exclude=Generic.Files.LineLength | |
| - name: Make sure project files are compilable | |
| run: find -L . -path ./vendor -prune -o -path ./tests -prune -o -name '*.php' -print0 | xargs -0 -n 1 -P 4 php -l |