SharpCoreDB/.github/workflows/ci.yml at master · MPCoreDeveloper/SharpCoreDB · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
name: CI/CD Pipeline

on:
  push:
    branches: [ master, develop ]
  pull_request:
    branches: [ master, develop ]

permissions:
  contents: read

env:
  DOTNET_VERSION: '10.0.x'
  DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true
  DOTNET_CLI_TELEMETRY_OPTOUT: true
  DOTNET_NOLOGO: true

jobs:
  build:
    name: Build & Test
    runs-on: ${{ matrix.os }}
    timeout-minutes: 30
    strategy:
      fail-fast: false
      matrix:
        os: [ ubuntu-latest, windows-latest, macos-latest ]

    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0

    - name: Setup .NET 10
      uses: actions/setup-dotnet@v4
      with:
        dotnet-version: '10.0.x'

    - name: Display .NET info
      run: dotnet --info

    - name: Restore dependencies
      run: dotnet restore SharpCoreDB.CI.slnf

    - name: Fail on deprecated NuGet packages
      shell: pwsh
      run: |
        $output = dotnet list SharpCoreDB.CI.slnf package --deprecated
        $outputText = $output | Out-String
        Write-Host $outputText

        if ($LASTEXITCODE -ne 0) {
          Write-Error "Failed to evaluate deprecated packages."
          exit $LASTEXITCODE
        }

        if ($outputText -match "has the following deprecated packages") {
          Write-Error "Deprecated NuGet packages detected. CI is configured to fail."
          exit 1
        }

        Write-Host "No deprecated NuGet packages detected."

    - name: Fail on vulnerable NuGet packages
      shell: pwsh
      run: |
        $output = dotnet list SharpCoreDB.CI.slnf package --vulnerable
        $outputText = $output | Out-String
        Write-Host $outputText

        if ($LASTEXITCODE -ne 0) {
          Write-Error "Failed to evaluate vulnerable packages."
          exit $LASTEXITCODE
        }

        if ($outputText -match "has the following vulnerable packages") {
          Write-Error "Vulnerable NuGet packages detected. CI is configured to fail."
          exit 1
        }

        Write-Host "No vulnerable NuGet packages detected."

    - name: Build
      run: dotnet build SharpCoreDB.CI.slnf --configuration Release --no-restore /p:ContinuousIntegrationBuild=true

    - name: Test
      run: dotnet test SharpCoreDB.CI.slnf --configuration Release --no-build --verbosity normal --logger trx --collect:"XPlat Code Coverage" --filter "Category!=Performance&Category!=Debug&Category!=Manual"
      timeout-minutes: 20
      env:
        CI: "true"
        GITHUB_ACTIONS: "true"

    - name: Upload test results
      if: always()
      uses: actions/upload-artifact@v4
      with:
        name: test-results-${{ matrix.os }}
        path: '**/TestResults/**/*.trx'
        if-no-files-found: ignore

    - name: Upload coverage
      if: matrix.os == 'ubuntu-latest'
      uses: codecov/codecov-action@v4
      with:
        files: '**/TestResults/**/coverage.cobertura.xml'
        flags: unittests
        name: codecov-umbrella
        fail_ci_if_error: false
        token: ${{ secrets.CODECOV_TOKEN }}

  pack:
    name: Pack NuGet Packages
    runs-on: ubuntu-latest
    needs: build
    if: github.event_name == 'push' && github.ref == 'refs/heads/master'

    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0

    - name: Setup .NET 10
      uses: actions/setup-dotnet@v4
      with:
        dotnet-version: '10.0.x'

    - name: Pack NuGet packages
      run: dotnet pack SharpCoreDB.CI.slnf --configuration Release --output ./artifacts /p:ContinuousIntegrationBuild=true

    - name: Upload NuGet artifacts
      uses: actions/upload-artifact@v4
      with:
        name: nuget-packages
        path: ./artifacts/*.nupkg
        if-no-files-found: error