libewf/.github/workflows/check_source.yml at main · libyal/libewf · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
# Run source checks.
name: source_checks
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
on:
  pull_request:
  push:
permissions:
  contents: read
jobs:
  asan:
    name: Check source with asan
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        include:
        - os: ubuntu-26.04
          compiler: 'gcc'
          configure_options: '--enable-asan'
    steps:
    - name: Checkout repository
      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      with:
        persist-credentials: false
    - name: Install build dependencies
      run: |
        sudo apt -y install autoconf automake autopoint build-essential git libasan8 libtool pkg-config
    - name: Download test data
      run: |
        if test -x "synctestdata.sh"; then ./synctestdata.sh; fi
    - name: Build from source
      env:
        CC: ${{ matrix.compiler }}
      run: |
        ./synclibs.sh --use-head
        ./autogen.sh
        ./configure ${{ matrix.configure_options }}
        make > /dev/null
    - name: Run tests
      run: |
        tests/runtests.sh VERBOSE=1
  black:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      with:
        persist-credentials: false
    - name: Check format of Python code
      uses: psf/black@258e7dbf348bc23cb70b8cdf693481c04634ebcc # 26.10.1
      with:
        options: "--check"
        src: "."
  scan_build:
    name: Check source with scan-build
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        include:
        - os: ubuntu-26.04
          compiler: 'gcc'
    permissions:
      # Required to upload to GitHub Code Scanning
      security-events: write
    steps:
    - name: Checkout repository
      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      with:
        persist-credentials: false
    - name: Install build dependencies
      run: |
        sudo apt -y install autoconf automake autopoint build-essential clang clang-tools git jq libtool pkg-config
    - name: Build from source
      env:
        CC: ${{ matrix.compiler }}
      run: |
        ./synclibs.sh --use-head
        ./autogen.sh
        ./configure
        scan-build -o scan-results -sarif make
    - name: Combine individual SARIF files
      env:
        EMPTY_SARIF: |
          {
            "$schema": "https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.6.json",
            "version": "2.1.0",
            "runs": [
              {
                "tool": {
                  "driver": {
                    "name": "clang",
                    "version": "Ubuntu clang version 18.1.3 (1ubuntu1)",
                    "rules": [
                      {
                        "id": "unix.Malloc"
                      },
                      {
                        "id": "core.BitwiseShift"
                      }
                    ]
                  }
                },
                "results": []
              }
            ]
          }
      run: |
        npx @microsoft/sarif-multitool merge scan-results/*/*.sarif --output-file=scan-build-report.sarif
        NUMBER_OF_RESULTS=$( jq '.runs[0].results | length' scan-build-report.sarif )
        if [ $NUMBER_OF_RESULTS -eq 0 ]; then
          echo "$EMPTY_SARIF" > scan-build-report.sarif
        fi
    - name: Upload combined SARIF file
      uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
      with:
        sarif_file: scan-build-report.sarif
        category: scan-build
  shellcheck:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      with:
        persist-credentials: false
    - name: Install shellcheck
      run: |
        sudo apt-get update
        sudo apt-get install -y shellcheck
    - name: Check format of shell scripts
      run: |
        shellcheck ./autogen.sh
        shellcheck ./runtests.sh
        shellcheck ./synclibs.sh
        find tests/ -name "*.sh" -exec shellcheck {} +
  ubsan:
    name: Check source with ubsan
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        include:
        - os: ubuntu-26.04
          compiler: 'gcc'
          configure_options: '--enable-ubsan'
    steps:
    - name: Checkout repository
      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      with:
        persist-credentials: false
    - name: Install build dependencies
      run: |
        sudo apt -y install autoconf automake autopoint build-essential git libtool libubsan1 pkg-config
    - name: Download test data
      run: |
        if test -x "synctestdata.sh"; then ./synctestdata.sh; fi
    - name: Build from source
      env:
        CC: ${{ matrix.compiler }}
      run: |
        ./synclibs.sh --use-head
        ./autogen.sh
        ./configure ${{ matrix.configure_options }}
        make > /dev/null
    - name: Run tests
      run: |
        tests/runtests.sh VERBOSE=1