Add Apex

.github/workflows/check_version.yml

@@ -6,49 +6,9 @@ on:
     branches:
       - main
       - develop
-      - master # for safety reasons
 
 jobs:
-  configure:
-    runs-on: ${{ github.repository_owner == 'zondax' && 'zondax-runners' || 'ubuntu-latest' }}
-    outputs:
-      uid_gid: ${{ steps.get-user.outputs.uid_gid }}
-    steps:
-      - id: get-user
-        run: echo "uid_gid=$(id -u):$(id -g)" >> $GITHUB_OUTPUT
-
-  get_version:
-    needs: configure
-    runs-on: ${{ github.repository_owner == 'zondax' && 'zondax-runners' || 'ubuntu-latest' }}
-    container:
-      image: zondax/ledger-app-builder:latest
-      options: --user ${{ needs.configure.outputs.uid_gid }}
-    env:
-      SDK_VARNAME: NANOSP_SDK
-    outputs:
-      version: ${{ steps.store-version.outputs.version }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          submodules: true
-      - run: make version
-      - id: store-version
-        run: echo "version=$(cat ./app/app.version)" >> $GITHUB_OUTPUT
-
-  check_app_version:
-    needs: get_version
-    runs-on: ${{ github.repository_owner == 'zondax' && 'zondax-runners' || 'ubuntu-latest' }}
-    steps:
-      - id: checkTag
-        uses: mukunku/tag-exists-action@v1.0.0
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          tag: ${{ needs.get_version.outputs.version }}
-
-      - run: echo ${{ steps.checkTag.outputs.exists }}
-
-      - name: Tag exists
-        if: ${{ steps.checkTag.outputs.exists == 'true' }}
-        run: exit 1
+  ledger-check-version:
+    uses: Zondax/_workflows/.github/workflows/_ledger_check_version.yml@v3
+    with:
+      runs-on: ${{ github.repository_owner == 'zondax' && 'zondax-runners' || 'ubuntu-latest' }}

.github/workflows/codeql_checks.yml

@@ -0,0 +1,22 @@
+name: "CodeQL"
+
+on:
+  workflow_dispatch:
+  push:
+  pull_request:
+    branches:
+      - main
+      - develop
+      - master
+      - dev
+    paths-ignore:
+      - '.github/workflows/*.yml'
+      - 'tests/*'
+
+jobs:
+  analyse:
+    name: Call Ledger CodeQL analysis
+    uses: LedgerHQ/ledger-app-workflows/.github/workflows/reusable_codeql_checks.yml@v1
+    with:
+      builder: ledger-app-builder
+    secrets: inherit

.github/workflows/guidelines_enforcer.yml

@@ -11,15 +11,14 @@ name: Ensure compliance with Ledger guidelines
 on:
   workflow_dispatch:
   push:
+  pull_request:
     branches:
       - main
       - develop
-      - master # for safety reasons
-      - dev  # for safety reasons
-  pull_request:
+      - master
+      - dev
 
 jobs:
   guidelines_enforcer:
-    if: github.event.repository.private == false
     name: Call Ledger guidelines_enforcer
     uses: LedgerHQ/ledger-app-workflows/.github/workflows/reusable_guidelines_enforcer.yml@v1

.github/workflows/lint.yml

@@ -0,0 +1,18 @@
+name: Lint and format 💅
+
+on:
+  workflow_dispatch:
+  push:
+  pull_request:
+    branches:
+      - main
+      - develop
+      - master
+      - dev
+
+jobs:
+  ledger-lint:
+    uses: Zondax/_workflows/.github/workflows/_ledger_lint.yml@v3
+    with:
+      runs-on: ${{ github.repository_owner == 'zondax' && 'zondax-runners' || 'ubuntu-latest' }}
+      check_rust: true