Merge pull request #106 from lwalden/chore/hlpm-ping-path-fix #237
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================================== | |
| # Continuous Integration Workflow | |
| # ============================================================================== | |
| # Runs on pull requests and pushes to main. | |
| # ============================================================================== | |
| name: CI | |
| on: | |
| push: | |
| branches: [main, master] | |
| pull_request: | |
| branches: [main, master] | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| # ============================================================================ | |
| # Detect which files changed to conditionally run jobs | |
| # ============================================================================ | |
| changes: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| pull-requests: read | |
| outputs: | |
| backend: ${{ steps.filter.outputs.backend }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Check paths | |
| uses: dorny/paths-filter@v4 | |
| id: filter | |
| with: | |
| filters: | | |
| backend: | |
| - 'src/**' | |
| - 'tests/**' | |
| - '*.sln' | |
| - '**/*.csproj' | |
| - 'tools/ci/**' | |
| - '.github/workflows/ci.yml' | |
| # ============================================================================ | |
| # Build and Test (.NET 8) | |
| # ============================================================================ | |
| build: | |
| needs: changes | |
| if: needs.changes.outputs.backend == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Setup .NET 8 | |
| uses: actions/setup-dotnet@v5 | |
| with: | |
| dotnet-version: '8.0.x' | |
| - name: Restore dependencies | |
| run: dotnet restore | |
| - name: Build | |
| run: dotnet build --no-restore --configuration Release | |
| - name: Test | |
| run: dotnet test --no-build --configuration Release --verbosity normal --logger "trx;LogFileName=test-results.trx" | |
| - name: Upload test results | |
| uses: actions/upload-artifact@v7 | |
| if: always() | |
| with: | |
| name: test-results | |
| path: '**/test-results.trx' | |
| # ============================================================================ | |
| # Host-Boot Smoke (S6-002) | |
| # ============================================================================ | |
| # The unit suite never boots the Functions host, so a dead host can ship | |
| # behind green tests (S5-004r). This job boots the real isolated worker | |
| # against Azurite and asserts all 4 timer functions register with no | |
| # TypeLoadException and no worker-restart loop. Zero secrets: storage is | |
| # UseDevelopmentStorage=true (script default) pointed at local Azurite. | |
| host-boot-smoke: | |
| needs: changes | |
| if: needs.changes.outputs.backend == 'true' | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Setup .NET 8 | |
| uses: actions/setup-dotnet@v5 | |
| with: | |
| dotnet-version: '8.0.x' | |
| # Cache the npm download cache for the two pinned global tools - a cold | |
| # install takes minutes and occasionally flakes on registry hiccups. | |
| # Key includes the pinned versions string so a deliberate version bump | |
| # invalidates the cache. | |
| - name: Cache npm global tool downloads | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.npm | |
| key: ${{ runner.os }}-npm-azurite@3.35.0-azure-functions-core-tools@4.8.0 | |
| # Pinned to the versions verified on the dev box (Default D9: pin the | |
| # exact npm package version that works; bump deliberately). | |
| - name: Install Azurite + Azure Functions Core Tools v4 | |
| run: npm install -g azurite@3.35.0 azure-functions-core-tools@4.8.0 | |
| - name: Start Azurite | |
| run: | | |
| mkdir -p "$RUNNER_TEMP/azurite" | |
| nohup azurite --silent --location "$RUNNER_TEMP/azurite" > "$RUNNER_TEMP/azurite/azurite.log" 2>&1 & | |
| - name: Build | |
| run: dotnet build --configuration Release | |
| - name: Run host-boot smoke | |
| env: | |
| SMOKE_LOG: ${{ runner.temp }}/host-boot-smoke.log | |
| run: bash tools/ci/host-boot-smoke.sh | |
| # Guard: the captured host log can contain the storage connection string | |
| # (and any account key in it) if a real AzureWebJobsStorage is ever | |
| # passed to this job. Only UseDevelopmentStorage=true (local Azurite, | |
| # well-known dev credentials) is permitted in this job - never point it | |
| # at a real storage account. | |
| # cancelled() included so a timeout-minutes kill still uploads the log. | |
| - name: Upload host log | |
| uses: actions/upload-artifact@v7 | |
| if: failure() || cancelled() | |
| with: | |
| name: host-boot-smoke-log | |
| path: ${{ runner.temp }}/host-boot-smoke.log | |
| if-no-files-found: ignore | |
| retention-days: 7 | |
| # ============================================================================ | |
| # Security Scanning | |
| # ============================================================================ | |
| security: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Scan for secrets | |
| uses: trufflesecurity/trufflehog@main | |
| with: | |
| extra_args: --only-verified | |
| # ============================================================================ | |
| # All Checks Pass Gate (for branch protection rules) | |
| # ============================================================================ | |
| all-checks: | |
| if: always() | |
| needs: [changes, build, host-boot-smoke, security] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check all jobs passed | |
| run: | | |
| if [[ "${{ contains(needs.*.result, 'failure') }}" == "true" ]]; then | |
| echo "One or more jobs failed" | |
| exit 1 | |
| fi | |
| echo "All checks passed!" |