Adjust security config #41
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| push: ~ | |
| pull_request: ~ | |
| release: | |
| types: [created] | |
| schedule: | |
| - | |
| cron: "0 1 * * 6" # Run at 1am every Saturday | |
| jobs: | |
| tests: | |
| runs-on: ubuntu-latest | |
| name: "PHP ${{ matrix.php }}, Symfony ${{ matrix.symfony }}, MySQL ${{ matrix.mysql }}" | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| php: ["8.1"] | |
| symfony: ["^6.4"] | |
| node: ["20.x"] | |
| mysql: ["8.0"] | |
| env: | |
| APP_ENV: test | |
| DATABASE_URL: "mysql://root:[email protected]/sylius_test?serverVersion=${{ matrix.mysql }}" | |
| steps: | |
| - | |
| uses: actions/checkout@v4 | |
| - | |
| name: Setup PHP | |
| uses: shivammathur/setup-php@v2 | |
| with: | |
| php-version: "${{ matrix.php }}" | |
| extensions: intl | |
| tools: symfony | |
| coverage: none | |
| env: | |
| COMPOSER_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - | |
| name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: "${{ matrix.node }}" | |
| - | |
| name: Shutdown default MySQL | |
| run: sudo service mysql stop | |
| - | |
| name: Setup MySQL | |
| uses: mirromutth/[email protected] | |
| with: | |
| mysql version: "${{ matrix.mysql }}" | |
| mysql root password: "root" | |
| - | |
| name: Output PHP version for Symfony CLI | |
| run: php -v | head -n 1 | awk '{ print $2 }' > .php-version | |
| - | |
| name: Install certificates | |
| run: symfony server:ca:install | |
| - | |
| name: Run Chrome Headless | |
| run: google-chrome-stable --enable-automation --disable-background-networking --no-default-browser-check --no-first-run --disable-popup-blocking --disable-default-apps --allow-insecure-localhost --disable-translate --disable-extensions --no-sandbox --enable-features=Metal --headless --remote-debugging-port=9222 --window-size=2880,1800 --proxy-server='direct://' --proxy-bypass-list='*' http://127.0.0.1 > /dev/null 2>&1 & | |
| - | |
| name: Restrict Symfony version | |
| if: matrix.symfony != '' | |
| run: composer config extra.symfony.require "${{ matrix.symfony }}" | |
| - | |
| name: Run webserver | |
| run: symfony server:start --port=8080 --dir=public --daemon | |
| - | |
| name: Get Composer cache directory | |
| id: composer-cache | |
| run: echo "::set-output name=dir::$(composer config cache-files-dir)" | |
| - | |
| name: Cache Composer | |
| uses: actions/cache@v4 | |
| with: | |
| path: ${{ steps.composer-cache.outputs.dir }} | |
| key: ${{ runner.os }}-php-${{ matrix.php }}-composer-${{ hashFiles('**/composer.json **/composer.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-php-${{ matrix.php }}-composer- | |
| - | |
| name: Install PHP dependencies | |
| run: composer update --no-interaction --prefer-dist --no-scripts | |
| - | |
| name: Get Yarn cache directory | |
| id: yarn-cache | |
| run: echo "::set-output name=dir::$(yarn cache dir)" | |
| - | |
| name: Cache Yarn | |
| uses: actions/cache@v4 | |
| with: | |
| path: ${{ steps.yarn-cache.outputs.dir }} | |
| key: ${{ runner.os }}-node-${{ matrix.node }}-yarn-${{ hashFiles('**/package.json **/yarn.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-node-${{ matrix.node }}-yarn- | |
| - | |
| name: Install JS dependencies | |
| run: yarn install | |
| - | |
| name: Prepare test application database | |
| run: | | |
| APP_DEBUG=1 bin/console doctrine:database:create -vvv | |
| bin/console doctrine:migrations:migrate --no-interaction -vvv | |
| - | |
| name: Prepare test application assets | |
| run: | | |
| bin/console assets:install public -vvv | |
| yarn build | |
| - | |
| name: Prepare test application cache | |
| run: bin/console cache:warmup -vvv | |
| - | |
| name: Load fixtures | |
| run: bin/console sylius:fixtures:load -n | |
| - | |
| name: Validate composer.json | |
| run: composer validate --ansi --strict | |
| - | |
| name: Run security check | |
| run: symfony security:check | |
| - | |
| name: Validate database schema | |
| run: bin/console doctrine:schema:validate --skip-sync -vvv | |
| - | |
| name: Run Behat | |
| run: | | |
| vendor/bin/behat --strict --no-interaction -vvv -f progress --tags="~@javascript && ~@todo && ~@cli" | |
| - | |
| name: Upload Behat logs | |
| uses: actions/upload-artifact@v4 | |
| if: failure() | |
| with: | |
| name: Behat logs | |
| path: etc/build/ | |
| if-no-files-found: ignore |