ci-php.yaml

name: vaas-php-ci
on:
  push:
    branches:
      - main
    paths:
      - "php/**"
      - ".github/workflows/ci-php.yaml"
    tags:
      - "php*"
  pull_request:
    branches:
      - main
    paths:
      - "php/**"
      - ".github/workflows/ci-php.yaml"
  workflow_dispatch:
    inputs:
      environment:
        type: choice
        description: "Test environment"
        options:
          - production
          - staging
        default: "production"

env:
  CLIENT_ID: ${{ secrets.CLIENT_ID }}
  CLIENT_SECRET: ${{ (inputs.environment == 'production' || inputs.environment == null || startsWith(github.ref, 'refs/tags/php')) && secrets.CLIENT_SECRET || secrets.STAGING_CLIENT_SECRET }}
  VAAS_URL: ${{ (inputs.environment == 'production' || inputs.environment == null || startsWith(github.ref, 'refs/tags/php')) && 'wss://gateway.production.vaas.gdatasecurity.de' || 'wss://gateway.staging.vaas.gdatasecurity.de' }}
  TOKEN_URL: ${{ (inputs.environment == 'production' || inputs.environment == null || startsWith(github.ref, 'refs/tags/php')) && 'https://account.gdata.de/realms/vaas-production/protocol/openid-connect/token' || 'https://account-staging.gdata.de/realms/vaas-staging/protocol/openid-connect/token' }}
  VAAS_CLIENT_ID: ${{ secrets.VAAS_CLIENT_ID }}
  VAAS_USER_NAME: ${{ secrets.VAAS_USER_NAME }}
  VAAS_PASSWORD: ${{ (inputs.environment == 'production' || inputs.environment == null || startsWith(github.ref, 'refs/tags/php')) && secrets.VAAS_PASSWORD || secrets.STAGING_VAAS_PASSWORD }}

jobs:
  build-php:
    name: Build & Test PHP SDK
    runs-on: ubuntu-20.04
    strategy:
      matrix:
        version: ["7.4", "8.0", "8.1", "8.2"]
    steps:
      - name: checkout
        uses: actions/checkout@v3

      - name: setup PHP with PECL extension
        uses: shivammathur/setup-php@v2
        with:
          php-version: ${{ matrix.version }}

      - name: install php dependencies
        uses: php-actions/composer@v6
        with:
          working_dir: php/tests/vaas
          php_version: ${{ matrix.version }}

      - name: run tests
        run: ./vendor/bin/phpunit --colors --testdox
        working-directory: php/tests/vaas

      - name: install example requirements
        run: composer install
        working-directory: php/examples/VaasExample

      - name: run example (scan file)
        env:
          SCAN_PATH: "GetVerdictByFile.php"
        run: php GetVerdictByFile.php
        working-directory: php/examples/VaasExample

      - name: run example (scan url)
        run: php GetVerdictByUrl.php
        working-directory: php/examples/VaasExample

      - name: run example (scan hash)
        run: php GetVerdictByHash.php
        working-directory: php/examples/VaasExample

      - name: Microsoft Teams Notification
        uses: skitionek/notify-microsoft-teams@master
        if: failure()
        with:
          webhook_url: ${{ secrets.MSTEAMS_WEBHOOK }}
          overwrite: "{title: `Failed workflow on for VaaS-SDK ${workflow}`, sections: [{activityTitle: 'build failed', activitySubtitle: `Failed workflow on for VaaS-SDK ${workflow}`, activityImage: 'https://adaptivecards.io/content/cats/3.png'}], themeColor: '#ff0000'}"

  deploy:
    needs: build-php
    name: deploy new php version
    runs-on: ubuntu-20.04
    steps:
      - name: debug output
        run: echo ${{github.ref}}

      - name: extract version
        if: startsWith(github.ref, 'refs/tags/php')
        run: |
          echo "RELEASE_VERSION=${GITHUB_REF#refs/*/php}" >> $GITHUB_ENV
          echo $RELEASE_VERSION

      - name: checkout
        if: startsWith(github.ref, 'refs/tags/php')
        uses: actions/checkout@v3

      - name: publish on site repo
        if: startsWith(github.ref, 'refs/tags/php')
        env:
          GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
        working-directory: php/src/vaas
        run: |
          git config --global user.email "ata-no-one@gdata.de"
          git config --global user.name "Version Bot"
          sed -i "s/\"version\": \"0.0.0\"/\"version\": \"$RELEASE_VERSION\"/g" ./composer.json
          cp ../../../Readme.md .
          git init
          git add .
          git commit -m"publish php $RELEASE_VERSION"
          git branch -M main
          git tag v$RELEASE_VERSION
          git remote add origin https://ata-no-one:$GITHUB_TOKEN@github.com/GDATASoftwareAG/vaas-php
          git push origin main --tags --force

      - name: sync packagist
        if: startsWith(github.ref, 'refs/tags/php')
        env:
          PACKAGIST_API_TOKEN: ${{ secrets.PACKAGIST_API_TOKEN }}
        run: curl -XPOST -H'content-type:application/json' "https://packagist.org/api/update-package?username=gdatacyberdefense&apiToken=$PACKAGIST_API_TOKEN" -d'{"repository":{"url":"https://packagist.org/packages/gdata/vaas"}}'

      - name: Microsoft Teams Notification
        uses: skitionek/notify-microsoft-teams@master
        if: failure()
        with:
          webhook_url: ${{ secrets.MSTEAMS_WEBHOOK }}
          overwrite: "{title: `Failed workflow on for VaaS-SDK ${workflow}`, sections: [{activityTitle: 'build failed', activitySubtitle: `Failed workflow on for VaaS-SDK ${workflow}`, activityImage: 'https://adaptivecards.io/content/cats/3.png'}], themeColor: '#ff0000'}"