mirror of
https://github.com/Cacti/cacti.git
synced 2026-11-03 18:47:54 +09:00
69 lines
1.7 KiB
YAML
69 lines
1.7 KiB
YAML
name: CSRF Coverage
|
|
|
|
on:
|
|
push:
|
|
branches: [develop]
|
|
paths:
|
|
- '.github/workflows/csrf-coverage.yml'
|
|
- '.github/actions/setup-php-composer/**'
|
|
- 'composer.json'
|
|
- 'composer.lock'
|
|
- 'include/csrf.php'
|
|
- 'lib/csrf.php'
|
|
- 'tests/phpunit-csrf-coverage.xml'
|
|
- 'tests/Unit/Security/Csrf/**'
|
|
pull_request:
|
|
branches: [develop]
|
|
paths:
|
|
- '.github/workflows/csrf-coverage.yml'
|
|
- '.github/actions/setup-php-composer/**'
|
|
- 'composer.json'
|
|
- 'composer.lock'
|
|
- 'include/csrf.php'
|
|
- 'lib/csrf.php'
|
|
- 'tests/phpunit-csrf-coverage.xml'
|
|
- 'tests/Unit/Security/Csrf/**'
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: csrf-coverage-${{ github.event.pull_request.number || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
env:
|
|
COMPOSER_ALLOW_SUPERUSER: 1
|
|
|
|
jobs:
|
|
coverage:
|
|
name: CSRF 100% coverage
|
|
runs-on: ubuntu-24.04
|
|
timeout-minutes: 20
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Setup locked PHP 8.3 dependencies
|
|
uses: ./.github/actions/setup-php-composer
|
|
with:
|
|
php-version: '8.3'
|
|
coverage: xdebug
|
|
extensions: intl, mysql, gd, ldap, gmp, xml, curl, json, mbstring
|
|
dependency-mode: locked-csrf-coverage
|
|
install-args: --prefer-dist --no-progress --no-interaction
|
|
|
|
- name: Enforce line coverage
|
|
env:
|
|
XDEBUG_MODE: coverage
|
|
run: |
|
|
set -euo pipefail
|
|
include/vendor/bin/pest \
|
|
--configuration=tests/phpunit-csrf-coverage.xml \
|
|
--coverage \
|
|
--coverage-text \
|
|
--min=100
|