-
-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
12 changed files
with
486 additions
and
61 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,29 @@ | ||
| # When a PR is opened or a push is made, compare | ||
| # code for backwards compatibility. | ||
| name: RoaveBC | ||
|
|
||
| on: | ||
| pull_request: | ||
| branches: | ||
| - develop | ||
| paths: | ||
| - 'src/**' | ||
|
|
||
| jobs: | ||
| compare: | ||
| name: Compare for Backwards Compatibility | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
| with: | ||
| fetch-depth: 0 | ||
|
|
||
| - name: Run comparison (limited) | ||
| if: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name }} | ||
| uses: docker://nyholm/roave-bc-check-ga | ||
|
|
||
| - name: Run comparison (authenticated) | ||
| if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name }} | ||
| uses: docker://nyholm/roave-bc-check-ga | ||
| env: | ||
| COMPOSER_AUTH: ${{ secrets.COMPOSER_AUTH }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,39 @@ | ||
| # When a PR is opened or a push is made, check code | ||
| # for duplication with PHP Copy/Paste Detector. | ||
| name: PHPCPD | ||
|
|
||
| on: | ||
| pull_request: | ||
| branches: | ||
| - 'develop' | ||
| paths: | ||
| - 'src/**' | ||
| - 'tests/**' | ||
| - '.github/workflows/test-phpcpd.yml' | ||
| push: | ||
| branches: | ||
| - 'develop' | ||
| paths: | ||
| - 'src/**' | ||
| - 'tests/**' | ||
| - '.github/workflows/test-phpcpd.yml' | ||
|
|
||
| jobs: | ||
| build: | ||
| name: Duplicate Code Detection | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Checkout | ||
| uses: actions/checkout@v2 | ||
|
|
||
| - name: Setup PHP | ||
| uses: shivammathur/setup-php@v2 | ||
| with: | ||
| php-version: '8.0' | ||
| tools: phive | ||
| extensions: intl, json, mbstring, xml | ||
|
|
||
| - name: Detect code duplication | ||
| run: | | ||
| sudo phive --no-progress install --global --trust-gpg-keys 4AA394086372C20A phpcpd | ||
| phpcpd src/ tests/ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,79 @@ | ||
| # When a PR is opened or a push is made, perform an | ||
| # architectural inspection on the code using Deptrac. | ||
| name: Deptrac | ||
|
|
||
| on: | ||
| pull_request: | ||
| branches: | ||
| - 'develop' | ||
| paths: | ||
| - 'src/**' | ||
| - 'tests/**' | ||
| - 'composer.**' | ||
| - 'depfile.yaml' | ||
| - '.github/workflows/inspect.yml' | ||
| push: | ||
| branches: | ||
| - 'develop' | ||
| paths: | ||
| - 'src/**' | ||
| - 'tests/**' | ||
| - 'composer.**' | ||
| - 'depfile.yaml' | ||
| - '.github/workflows/inspect.yml' | ||
|
|
||
| jobs: | ||
| build: | ||
| name: Architectural Inspection | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Checkout | ||
| uses: actions/checkout@v2 | ||
|
|
||
| - name: Setup PHP | ||
| uses: shivammathur/setup-php@v2 | ||
| with: | ||
| php-version: '8.0' | ||
| tools: composer, pecl, phive | ||
| extensions: intl, json, mbstring, xml | ||
| env: | ||
| COMPOSER_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
|
|
||
| - name: Get composer cache directory | ||
| id: composer-cache | ||
| run: echo "::set-output name=dir::$(composer config cache-files-dir)" | ||
|
|
||
| - name: Create composer cache directory | ||
| run: mkdir -p ${{ steps.composer-cache.outputs.dir }} | ||
|
|
||
| - name: Cache composer dependencies | ||
| uses: actions/cache@v2 | ||
| with: | ||
| path: ${{ steps.composer-cache.outputs.dir }} | ||
| key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }} | ||
| restore-keys: ${{ runner.os }}-composer- | ||
|
|
||
| - name: Create Deptrac cache directory | ||
| run: mkdir -p build/ | ||
|
|
||
| - name: Cache Deptrac results | ||
| uses: actions/cache@v2 | ||
| with: | ||
| path: build | ||
| key: ${{ runner.os }}-deptrac-${{ github.sha }} | ||
| restore-keys: ${{ runner.os }}-deptrac- | ||
|
|
||
| - name: Install dependencies (limited) | ||
| if: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name }} | ||
| run: composer update --no-progress --no-interaction --prefer-dist --optimize-autoloader | ||
|
|
||
| - name: Install dependencies (authenticated) | ||
| if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name }} | ||
| run: composer update --no-progress --no-interaction --prefer-dist --optimize-autoloader | ||
| env: | ||
| COMPOSER_AUTH: ${{ secrets.COMPOSER_AUTH }} | ||
|
|
||
| - name: Run architectural inspection | ||
| run: | | ||
| sudo phive --no-progress install --global --trust-gpg-keys B8F640134AB1782E,A98E898BB53EB748 qossmic/deptrac | ||
| deptrac analyze --cache-file=build/deptrac.cache |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,34 @@ | ||
| <?php | ||
|
|
||
| use CodeIgniter\CodingStandard\CodeIgniter4; | ||
| use Nexus\CsConfig\Factory; | ||
| use PhpCsFixer\Finder; | ||
|
|
||
| $finder = Finder::create() | ||
| ->files() | ||
| ->in(__DIR__) | ||
| ->exclude('build') | ||
| ->append([__FILE__]); | ||
|
|
||
| // Remove overrides for incremental changes | ||
| $overrides = [ | ||
| 'array_indentation' => false, | ||
| 'braces' => false, | ||
| 'indentation_type' => false, | ||
| ]; | ||
|
|
||
| $options = [ | ||
| 'finder' => $finder, | ||
| 'cacheFile' => 'build/.php-cs-fixer.cache', | ||
| ]; | ||
|
|
||
| return Factory::create(new CodeIgniter4(), $overrides, $options)->forProjects(); | ||
|
|
||
| /* Reenable For libraries after incremental changes are applied | ||
| return Factory::create(new CodeIgniter4(), $overrides, $options)->forLibrary( | ||
| 'Tatter ________', | ||
| 'Tatter Software', | ||
| '', | ||
| 2021 | ||
| ); | ||
| */ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,26 @@ | ||
| # Security Policy | ||
|
|
||
| The development team and community take all security issues seriously. **Please do not make public any uncovered flaws.** | ||
|
|
||
| ## Reporting a Vulnerability | ||
|
|
||
| Thank you for improving the security of our code! Any assistance in removing security flaws will be acknowledged. | ||
|
|
||
| **Please report security flaws by emailing the development team directly: support@tattersoftware.com**. | ||
|
|
||
| The lead maintainer will acknowledge your email within 48 hours, and will send a more detailed response within 48 hours indicating | ||
| the next steps in handling your report. After the initial reply to your report, the security team will endeavor to keep you informed of the | ||
| progress towards a fix and full announcement, and may ask for additional information or guidance. | ||
|
|
||
| ## Disclosure Policy | ||
|
|
||
| When the security team receives a security bug report, they will assign it to a primary handler. | ||
| This person will coordinate the fix and release process, involving the following steps: | ||
|
|
||
| - Confirm the problem and determine the affected versions. | ||
| - Audit code to find any potential similar problems. | ||
| - Prepare fixes for all releases still under maintenance. These fixes will be released as fast as possible. | ||
|
|
||
| ## Comments on this Policy | ||
|
|
||
| If you have suggestions on how this process could be improved please submit a Pull Request. |
Oops, something went wrong.