Skip to content

Commit

Permalink
WIP: Change: Ci: following guidelines
Browse files Browse the repository at this point in the history
  • Loading branch information
nichtsfrei committed Jan 16, 2024
1 parent daee772 commit 0db84eb
Show file tree
Hide file tree
Showing 5 changed files with 143 additions and 0 deletions.
36 changes: 36 additions & 0 deletions .github/workflows/build.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
name: "Build"

on:
push:
branches: [ main ]
pull_request:

jobs:
OpenVAS:
runs-on: ubuntu-latest
strategy:
matrix:
# With the upcoming changes, we require both downwards and upwards compatibility between the OpenVAS C
# code and GVM-libs. This is because, even though we will be using semantic versioning, as long as
# OpenVAS and GVM-libs remain separate repositories, we want to be notified of every change.
gvm-libs-version:
- stable
- unstable
container: greenbone/gvm-libs:${{ matrix.gvm-libs-version }}
steps:
- uses: actions/checkout@v4
- name: install dependencies
run: |
sh .github/install-openvas-dependencies.sh
- name: build
run: |
cmake -Bbuild -DCMAKE_C_COMPILER=/usr/share/clang/scan-build-14/libexec/ccc-analyzer
scan-build -o ~/scan-build-report cmake --build build
- name: Upload scan-build report
uses: actions/upload-artifact@v3
with:
name: scan-build-report
path: ~/scan-build-report/
retention-days: 7
OpenVAS Daemon:
uses: ./.github/workflows/build-rust.yml
107 changes: 107 additions & 0 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,107 @@
name: "Linting"

on:
push:
branches: [ main]
pull_request:

jobs:
OpenVAS:
runs-on: ubuntu-latest
container: greenbone/gvm-libs:stable
steps:
- uses: actions/checkout@v4
- name: install dependencies
run: |
sh .github/install-openvas-dependencies.sh
- name: Formatting
run: |
clang-format -i -style=file {src,misc,nasl}/*.{c,h}
git diff --exit-code
- name: unit-tests
run: |
cmake -Bbuild -DCMAKE_BUILD_TYPE=Release
CTEST_OUTPUT_ON_FAILURE=1 cmake --build build -- tests test
OpenVAS Daemon:
runs-on: ubuntu-latest
defaults:
run:
working-directory: rust
- uses: actions/checkout@v4
- run: sudo apt update && sudo apt-get install -y libpcap-dev
- run: rustup update stable && rustup default stable || rustup default stable
- run: cargo install cargo-audit
- run: cargo install typos-cli
- name: unit-tests
run: cargo test --lib --tests --workspace
- run: cargo clippy -- -D warnings
- run: cargo audit
- run: typos
formatting:
runs-on: ubuntu-latest
defaults:
run:
working-directory: rust
strategy:
matrix:
crates:
# we verify each dir separately to make it easier to verify formatting issues or even ignore
# crates we deem not important for checking (e.g. feed-verifier)
- nasl-syntax
- storage
- nasl-interpreter
- redis-storage
- json-storage
- nasl-cli
steps:
- uses: actions/checkout@v4
rs-build-binaries:
uses: ./.github/workflows/build-rust.yml
verify-syntax:
runs-on: ubuntu-latest
needs: [rs-build-binaries]
steps:
- uses: actions/checkout@v4
- run: FEED_DIR="feed/" sh .github/prepare-feed.sh
- uses: actions/download-artifact@v3
with:
name: rs-binaries
path: assets
- run: mv assets/nasl-cli-x86_64-unknown-linux-gnu ./nasl-cli
- run: chmod +x ./nasl-cli
- name: verify syntax parsing
run: ./nasl-cli syntax --quiet feed/
verify-feed-update:
runs-on: ubuntu-latest
needs: [rs-build-binaries]
container:
# maybe better to use builder, build openvas to have
# the version of this checkout rather than a dataed official one?
image: greenbone/openvas-scanner:unstable
options: --privileged
services:
redis:
image: redis
options: >-
--health-cmd "redis-cli ping"
--health-interval 10s
--health-timeout 5s
--health-retries 5
steps:
- uses: actions/checkout@v4
- run: apt-get update && apt-get install -y docker.io
- run: FEED_DIR="feed/" sh .github/prepare-feed.sh
- uses: actions/download-artifact@v3
with:
name: rs-binaries
path: assets
- run: mv assets/nasl-cli-x86_64-unknown-linux-gnu ./nasl-cli
- run: mv assets/feed-verifier-x86_64-unknown-linux-gnu ./feed-verifier
- name: prepare setup
run: |
install -m 755 feed-verifier /usr/local/bin/
install -m 755 nasl-cli /usr/local/bin/
echo "db_address = tcp://redis:6379" >> /etc/openvas/openvas.conf
mv ./feed/* "$(openvas -s | grep plugins_folder | sed 's/plugins_folder = //')/"
- run: openvas -s
- run: feed-verifier || (cat /var/log/gvm/openvas.log && false)
File renamed without changes.
Empty file.
Empty file added .github/workflows/push.yml
Empty file.

0 comments on commit 0db84eb

Please sign in to comment.