Meelo/.github/workflows/scanner.yml at 61e772dd3e67ea265fe02419b6650f6f43ef2428 · Arthi-chaud/Meelo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
name: "Scanner"
on:
  pull_request:
    branches: [main, v3]
  push:
    branches: [main, v3]
  release:
    types: [published]

defaults:
  run:
    shell: bash
    working-directory: ./scanner
env:
  CGO_ENABLED: 1
  CGO_CXXFLAGS: -std=c++17

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  Changes:
    runs-on: ubuntu-latest
    permissions:
      pull-requests: read
    outputs:
      scanner: ${{ steps.filter.outputs.scanner }}
    steps:
      - name: Check out the repo
        uses: actions/checkout@v6
      - uses: dorny/paths-filter@v3
        id: filter
        with:
          filters: |
            scanner:
              - 'scanner/**'
              - '.github/workflows/scanner.yml'
              - '.github/actions/cache-scanner/**'
              - '.github/actions/dockerize/**'
  Build:
    needs: changes
    container: ghcr.io/hybridgroup/opencv:4.12.0
    if: ${{ needs.changes.outputs.scanner == 'true' && github.event_name == 'pull_request' }}
    runs-on: ubuntu-latest
    steps:
      - name: Check out the repo
        uses: actions/checkout@v6
      - name: Setup Go
        uses: ./.github/actions/cache-scanner
      - name: Install Dependencies and Build
        run: go build -buildvcs=false  -o scanner ./app
  Format:
    if: ${{ needs.changes.outputs.scanner == 'true' && github.event_name == 'pull_request' }}
    runs-on: ubuntu-latest
    container: ghcr.io/hybridgroup/opencv:4.12.0
    needs: [Build]
    steps:
      - name: Check out the repo
        uses: actions/checkout@v6
      - name: Setup Go
        uses: ./.github/actions/cache-scanner
      - uses: Jerome1337/gofmt-action@v1.0.5
        with:
          gofmt-path: "./scanner"
          gofmt-flags: "-l"
  Tests:
    runs-on: ubuntu-latest
    container: ghcr.io/hybridgroup/opencv:4.12.0
    needs: [Build]
    if: ${{ needs.changes.outputs.scanner == 'true' && always() }}
    steps:
      - name: Check out the repo
        uses: actions/checkout@v6
      - name: Setup Go
        uses: ./.github/actions/cache-scanner
      - run: apt-get update -y && apt-get install -y ffmpeg
      - name: Install Coverage Report
        run: go install github.com/jandelgado/gcov2lcov@latest
      - name: Run tests
        run: go test ./... -coverprofile=coverage.out
      - name: Upload Unit Tests artifact
        if: ${{ always() }}
        uses: actions/upload-artifact@v6
        with:
          name: coverage-report-scanner
          path: ./scanner/coverage.out
  Analysis:
    needs: [Tests]
    name: "Static Analysis"
    runs-on: ubuntu-latest
    if: ${{ needs.changes.outputs.scanner == 'true' && always() }}
    steps:
      - uses: actions/checkout@v6
      - name: Downlad Coverage artifact
        uses: actions/download-artifact@v7
        with:
          name: coverage-report-scanner
          path: ./scanner
      - name: Run SonarCloud Scan
        uses: SonarSource/sonarqube-scan-action@master
        with:
          projectBaseDir: ./scanner
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN_SCANNER }}
  Dockerize:
    runs-on: ubuntu-latest
    needs: changes
    if: ${{ github.event_name == 'release' || (needs.changes.outputs.scanner == 'true' && (github.event_name == 'pull_request' || (github.event_name == 'push' && github.ref == 'refs/heads/main'))) }}
    permissions:
      packages: write
      contents: read
    steps:
      - name: Check out the repo
        uses: actions/checkout@v6
      - uses: ./.github/actions/dockerize
        with:
          docker-username: ${{ secrets.DOCKERHUB_USERNAME }}
          docker-token: ${{ secrets.DOCKERHUB_TOKEN }}
          github-token: ${{ secrets.GITHUB_TOKEN }}
          context: ./scanner
          image-suffix: scanner
          publish: ${{ github.event_name == 'release' || (needs.changes.outputs.scanner == 'true' && github.event_name == 'push' && github.ref == 'refs/heads/main') }}