laravel-mongodb/.github/workflows/static-analysis.yml at e6c4f276ad9b9c4f942005115645dffbf55730a3 · mongodb/laravel-mongodb · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
name: Static Analysis

on:
  push:
    branches:
      - '[0-9]+.[0-9x]+'
  pull_request:
    branches:
      - '[0-9]+.[0-9x]+'
      - feature/*
  workflow_call:
    inputs:
      ref:
        description: The git ref to check
        type: string
        required: true

jobs:
  phpstan:
    name: PHP/${{ matrix.php }} Driver/${{ matrix.driver }}

    runs-on: ubuntu-22.04

    strategy:
      matrix:
        php: ['8.2', '8.3', '8.4', '8.5']
        driver: [2]
        include:
          - php: '8.4'
            driver: 1

    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || github.ref }}

      - name: Get SHA hash of checked out ref
        if: ${{ github.event_name == 'workflow_dispatch' }}
        run: |
          echo CHECKED_OUT_SHA=$(git rev-parse HEAD) >> $GITHUB_ENV

      - name: Setup PHP with MongoDB extension
        uses: ./.github/actions/setup-php
        with:
          php-version: ${{ matrix.php }}
          driver: ${{ matrix.driver }}
          extensions: curl,mbstring
          tools: composer:v2

      - name: Cache dependencies
        id: composer-cache
        uses: actions/cache@v6
        with:
          path: ./vendor
          key: composer-${{ hashFiles('**/composer.lock') }}

      - name: Install dependencies
        run: composer install

      - name: Restore cache PHPStan results
        id: phpstan-cache-restore
        uses: actions/cache/restore@v6
        with:
          path: .cache
          key: phpstan-result-cache-${{ matrix.php }}-${{ github.run_id }}
          restore-keys: |
            phpstan-result-cache-

      - name: Run PHPStan
        id: phpstan
        run: ./vendor/bin/phpstan analyse --no-interaction --no-progress --ansi --error-format=sarif > phpstan.sarif
        continue-on-error: true

      - name: Upload SARIF report
        if: ${{ github.event_name != 'workflow_dispatch' }}
        uses: github/codeql-action/upload-sarif@v4
        with:
          sarif_file: phpstan.sarif

      - name: Upload SARIF report
        if: ${{ github.event_name == 'workflow_dispatch' }}
        uses: github/codeql-action/upload-sarif@v4
        with:
          sarif_file: phpstan.sarif
          ref: ${{ inputs.ref }}
          sha: ${{ env.CHECKED_OUT_SHA }}

      - name: Save cache PHPStan results
        id: phpstan-cache-save
        if: always()
        uses: actions/cache/save@v6
        with:
          path: .cache
          key: ${{ steps.phpstan-cache-restore.outputs.cache-primary-key }}

      - name: Assert no PHPStan errors
        if: steps.phpstan.outcome == 'failure'
        run: exit 1