OnePassword.NET/.github/workflows/main.yml at develop · jscarle/OnePassword.NET · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
name: Release

on:
  push:
    branches: [ "develop" ]
  pull_request:
    branches: [ "develop" ]
  workflow_dispatch:

jobs:
  validate:
    name: Validate
    runs-on: ubuntu-latest
    outputs:
      has_secrets: ${{ steps.check-secrets.outputs.has_secrets }}
      run_live_tests: ${{ steps.check-secrets.outputs.run_live_tests }}
    steps:
      - name: Check secrets
        id: check-secrets
        env:
          OPT_ACCOUNT_ADDRESS: ${{ secrets.OPT_ACCOUNT_ADDRESS }}
          OPT_ACCOUNT_EMAIL: ${{ secrets.OPT_ACCOUNT_EMAIL }}
          OPT_ACCOUNT_NAME: ${{ secrets.OPT_ACCOUNT_NAME }}
          OPT_ACCOUNT_PASSWORD: ${{ secrets.OPT_ACCOUNT_PASSWORD }}
          OPT_ACCOUNT_SECRET_KEY: ${{ secrets.OPT_ACCOUNT_SECRET_KEY }}
          OPT_CREATE_TEST_USER: ${{ secrets.OPT_CREATE_TEST_USER }}
          OPT_RUN_LIVE_TESTS: ${{ secrets.OPT_RUN_LIVE_TESTS }}
          OPT_TEST_USER_EMAIL: ${{ secrets.OPT_TEST_USER_EMAIL }}
        run: |
          if [[ -n "$OPT_ACCOUNT_ADDRESS" && -n "$OPT_ACCOUNT_EMAIL" && -n "$OPT_ACCOUNT_NAME" && -n "$OPT_ACCOUNT_PASSWORD" && -n "$OPT_ACCOUNT_SECRET_KEY" && -n "$OPT_CREATE_TEST_USER" && -n "$OPT_TEST_USER_EMAIL" ]]; then
            echo "has_secrets=true" >> "$GITHUB_OUTPUT"
          else
            echo "has_secrets=false" >> "$GITHUB_OUTPUT"
          fi

          if [[ -n "$OPT_ACCOUNT_ADDRESS" && -n "$OPT_ACCOUNT_EMAIL" && -n "$OPT_ACCOUNT_NAME" && -n "$OPT_ACCOUNT_PASSWORD" && -n "$OPT_ACCOUNT_SECRET_KEY" && -n "$OPT_CREATE_TEST_USER" && -n "$OPT_TEST_USER_EMAIL" && "${OPT_RUN_LIVE_TESTS,,}" == "true" ]]; then
            echo "run_live_tests=true" >> "$GITHUB_OUTPUT"
          else
            echo "run_live_tests=false" >> "$GITHUB_OUTPUT"
          fi

  build:
    name: Build
    runs-on: ubuntu-latest
    needs: validate
    permissions:
      actions: read
      contents: read
      security-events: write

    strategy:
      fail-fast: false

    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v4
        with:
          languages: 'csharp'
      - name: Setup .NET 6.0
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: 6.0.x
      - name: Setup .NET 7.0
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: 7.0.x
      - name: Setup .NET 8.0
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: 8.0.x
      - name: Restore dependencies
        run: dotnet restore
      - name: Build
        run: dotnet build --configuration Release --no-restore
      - name: Test
        env:
          OPT_ACCOUNT_ADDRESS: ${{ secrets.OPT_ACCOUNT_ADDRESS }}
          OPT_ACCOUNT_EMAIL: ${{ secrets.OPT_ACCOUNT_EMAIL }}
          OPT_ACCOUNT_NAME: ${{ secrets.OPT_ACCOUNT_NAME }}
          OPT_ACCOUNT_PASSWORD: ${{ secrets.OPT_ACCOUNT_PASSWORD }}
          OPT_ACCOUNT_SECRET_KEY: ${{ secrets.OPT_ACCOUNT_SECRET_KEY }}
          OPT_CREATE_TEST_USER: ${{ secrets.OPT_CREATE_TEST_USER }}
          OPT_RUN_LIVE_TESTS: ${{ needs.validate.outputs.run_live_tests }}
          OPT_TEST_USER_EMAIL: ${{ secrets.OPT_TEST_USER_EMAIL }}
        run: dotnet test --configuration Release --no-build --verbosity normal
      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v4