ci: Add base GitHub CI #4
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Ruby CI | |
on: | |
push: | |
branches: [ "main" ] | |
pull_request: | |
branches: [ "main" ] | |
schedule: | |
- cron: '10 0 * * *' | |
env: | |
SECRET_DETECTION_JSON_REPORT_FILE: "gitleaks.json" | |
jobs: | |
package: | |
runs-on: ubuntu-latest | |
strategy: | |
matrix: | |
ruby_version: ['2.7', '3.2', '3.3'] | |
steps: | |
- uses: actions/checkout@v4 | |
- name: Set up Ruby | |
uses: ruby/setup-ruby@v1 | |
with: | |
ruby-version: ${{ matrix.ruby_version }} | |
bundler-cache: true | |
- name: Build package | |
run: bundle exec rake build | |
- name: Upload Artifacts | |
uses: actions/upload-artifact@v4 | |
with: | |
name: pkg | |
path: pkg/ | |
rubocop: | |
runs-on: ubuntu-latest | |
strategy: | |
matrix: | |
ruby_version: ['2.7', '3.2', '3.3'] | |
steps: | |
- uses: actions/checkout@v4 | |
- name: Set up Ruby | |
uses: ruby/setup-ruby@v1 | |
with: | |
ruby-version: ${{ matrix.ruby_version }} | |
bundler-cache: true | |
- name: Run rubocop | |
run: bundle exec rubocop | |
secret_detection: | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4 | |
with: | |
fetch-depth: 0 | |
- name: Install and run secret detection | |
run: | | |
wget https://github.com/gitleaks/gitleaks/releases/download/v8.18.4/gitleaks_8.18.4_linux_x64.tar.gz | |
tar -xzf gitleaks_8.18.4_linux_x64.tar.gz | |
EXITCODE=0 | |
./gitleaks detect -r ${SECRET_DETECTION_JSON_REPORT_FILE} --source . --log-opts="--all --full-history" || EXITCODE=$? | |
if [[ $EXITCODE -ne 0 ]]; then | |
exit $EXITCODE | |
fi | |
- name: Upload secret detection artifact | |
uses: actions/upload-artifact@v4 | |
with: | |
name: secret-detection-results | |
path: gitleaks.json | |
license_check: | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4 | |
- name: Run license check | |
run: | | |
./license_checker.sh '*.rb' | tee license_check_output.txt | |
'[ ! -s license_check_output.txt ]' | |
# Test and gem publishing stage are disabled/missing for now. Code needs to be tested | |
####################################################### | |
# test: | |
# runs-on: ubuntu-latest | |
# strategy: | |
# matrix: | |
# include: | |
# - ruby_version: '2.7' | |
# use_mock_server: '' | |
# - ruby_version: '3.2' | |
# use_mock_server: '' | |
# - ruby_version: '3.3' | |
# use_mock_server: '' | |
# - ruby_version: '2.7' | |
# use_mock_server: 'use mock server' | |
# - ruby_version: '3.2' | |
# use_mock_server: 'use mock server' | |
# - ruby_version: '3.3' | |
# use_mock_server: 'use mock server' | |
# steps: | |
# - uses: actions/checkout@v4 | |
# - name: Set up Ruby | |
# uses: ruby/setup-ruby@v1 | |
# with: | |
# ruby-version: ${{ matrix.ruby_version }} | |
# bundler-cache: true | |
# - name: Configure Mock Server | |
# if: matrix.use_mock_server != '' | |
# run: | | |
# echo "Using mock server" | |
# export DEEPL_SERVER_URL=http://deepl-mock:3000 | |
# export DEEPL_MOCK_SERVER_PORT=3000 | |
# export DEEPL_PROXY_URL=http://deepl-mock:3001 | |
# export DEEPL_MOCK_PROXY_SERVER_PORT=3001 | |
# - name: Run Tests | |
# run: bundle exec rake test | |
# - name: Run RSpec Tests | |
# run: bundle exec rspec --format RspecJunitFormatter --out rspec.xml | |
# - name: Upload Test Results | |
# uses: actions/upload-artifact@v4 | |
# with: | |
# name: test-results | |
# path: rspec.xml |