composer-license-checker/.github/workflows/ci.yml at 5f319f3203db74f22edc55993ad45b912121cce3 · Lendable/composer-license-checker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
name: "CI"

concurrency:
  group: "ci-${{ github.head_ref || github.run_id }}"
  cancel-in-progress: true

on:
  merge_group:
  pull_request:

jobs:
  lint-actionlint:
    name: "Lint workflows"
    runs-on: "ubuntu-24.04"
    permissions:
      contents: read
    steps:
      - name: "Checkout"
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          persist-credentials: false
          show-progress: false

      - name: "Install actionlint"
        id: actionlint
        run: bash <(curl -fsSL https://raw.githubusercontent.com/rhysd/actionlint/v1.7.12/scripts/download-actionlint.bash) 1.7.12

      - name: "Run actionlint"
        env:
          ACTIONLINT: "${{ steps.actionlint.outputs.executable }}"
        run: |
          echo "::add-matcher::.github/actionlint-matcher.json"
          trap 'echo "::remove-matcher owner=actionlint::"' EXIT
          "$ACTIONLINT" -color

  lint-zizmor:
    name: "Audit workflows"
    runs-on: "ubuntu-24.04"
    permissions:
      contents: read
    steps:
      - name: "Checkout"
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          persist-credentials: false
          show-progress: false

      - name: "Run zizmor"
        uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
        with:
          advanced-security: false
          version: "1.29.0"

  ci:
    name: "Execute (PHP ${{ matrix.php-version }} with ${{ matrix.dependencies }} deps, composer v${{ matrix.composer-version}}.x, symfony v${{ matrix.symfony-version }})"
    runs-on: "ubuntu-24.04"
    permissions:
      contents: read

    strategy:
      matrix:
        dependencies:
          - "lowest"
          - "locked"
          - "highest"
        php-version:
          - "8.4"
          - "8.5"
        composer-version:
          - "2.9"
          - "2.10"
        symfony-version:
          - "5.4.*"
          - "6.4.*"
          - "7.4.*"
          - "8.0.*"
          - "8.1.*"

    steps:
      - name: "Checkout"
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          persist-credentials: false
          show-progress: false

      - name: "Install PHP"
        uses: "shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240" # v2
        with:
          coverage: "pcov"
          php-version: "${{ matrix.php-version }}"
          ini-values: memory_limit=-1
          tools: "composer:${{ matrix.composer-version }}"

      - name: Setup Symfony Flex
        if: ${{ matrix.dependencies != 'locked' }}
        shell: bash
        run: |
          composer global config --no-plugins allow-plugins.symfony/flex true
          composer global require --no-progress --no-scripts --no-plugins symfony/flex

      - name: Install Composer dependencies
        uses: ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda # 4.0.0
        with:
          dependency-versions: "${{ matrix.dependencies }}"
        env:
          SYMFONY_REQUIRE: "${{ matrix.symfony-version }}"

      - name: Remove Symfony Flex
        if: ${{ matrix.dependencies != 'locked' }}
        shell: bash
        run: |
          composer global config --no-plugins allow-plugins.symfony/flex false
          composer global remove symfony/flex

      - name: "Validate Composer dependencies"
        run: "composer validate"

      - name: "Check composer.json normalization"
        run: "composer normalize --dry-run"

      - name: "Run security check"
        if: ${{ matrix.composer-version != '2.2' }}
        run: "composer security:check"

      - name: "Check licenses (composer installed.json provider)"
        run: "composer license:check -- --provider-id=json -v"

      - name: "Check licenses (composer licenses provider)"
        run: "composer license:check -- --provider-id=licenses -v"

      - name: "Run coding style"
        if: ${{ matrix.dependencies == 'locked' && matrix.php-version == '8.4' }}
        run: "composer code-style:check"

      - name: "Run PHPStan"
        if: ${{ matrix.dependencies == 'locked' }}
        run: "composer phpstan"

      - name: "Run Rector"
        if: ${{ matrix.dependencies == 'locked' && matrix.php-version == '8.4' }}
        run: "composer rector:check"

      - name: "Unit tests"
        run: "composer tests:unit"

      - name: "End-to-End tests"
        run: "composer tests:e2e"