realtime/.github/workflows/lint.yml at main · robusta-dev/realtime · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
name: Lint
on:
  pull_request:
    paths:
      - "lib/**"
      - "test/**"
      - "config/**"
      - "priv/**"
      - "assets/**"
      - "rel/**"
      - "mix.exs"
      - "mix.lock"
      - "Dockerfile"
      - "run.sh"
      - "mise.toml"
      - "test/e2e/nix-build.sh"
      - ".github/workflows/**"
      - ".github/actionlint.yaml"

  push:
    branches:
      - main

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  lint:
    name: Lint
    runs-on: blacksmith-4vcpu-ubuntu-2404

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Setup elixir
        id: beam
        uses: erlef/setup-beam@ee09b1e59bb240681c382eb1f0abc6a04af72764 # v1.23.0
        with:
          otp-version: 27.x # Define the OTP version [required]
          elixir-version: 1.18.x # Define the elixir version [required]
      - name: Cache Mix
        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
        with:
          path: |
            deps
            _build
          key: ${{ github.workflow }}-${{ runner.os }}-mix-${{ env.elixir }}-${{ env.otp }}-${{ hashFiles('**/mix.lock') }}
          restore-keys: |
            ${{ github.workflow }}-${{ runner.os }}-mix-${{ env.elixir }}-${{ env.otp }}-

      - name: Install dependencies
        run: mix deps.get
      - name: Check for warnings
        run: mix compile --force --warnings-as-errors
      - name: Run format check
        run: mix format --check-formatted
      - name: Credo checks
        run: mix credo
      - name: Run hex audit
        run: mix hex.audit
      - name: Run mix_audit
        # GHSA-g2wm-735q-3f56: low severity blocking CI
        # remove once a fixed cowlib is published
        run: mix deps.audit --ignore-advisory-ids "GHSA-g2wm-735q-3f56"
      - name: Run sobelow
        run: mix sobelow --config .sobelow-conf
      - name: Retrieve PLT Cache
        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
        id: plt-cache
        with:
          path: priv/plts
          key: ${{ runner.os }}-${{ steps.beam.outputs.otp-version }}-${{ steps.beam.outputs.elixir-version }}-plts-${{ hashFiles(format('{0}{1}', github.workspace, '/mix.lock')) }}
      - name: Create PLTs
        if: steps.plt-cache.outputs.cache-hit != 'true'
        run: |
          mkdir -p priv/plts
          mix dialyzer.build
      - name: Run dialyzer
        run: mix dialyzer

  actionlint:
    name: Actionlint
    runs-on: blacksmith-4vcpu-ubuntu-2404
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Run actionlint
        uses: rhysd/actionlint@v1.7.7

  shellcheck:
    name: Shellcheck
    runs-on: blacksmith-4vcpu-ubuntu-2404
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Run shellcheck
        run: shellcheck run.sh test/e2e/nix-build.sh