Snyk auto fix #17861
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: QGIS build | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - '[0-9]+.[0-9]+' | |
| tags: | |
| - '*' | |
| pull_request: | |
| env: | |
| HAS_SECRETS: ${{ secrets.HAS_SECRETS }} | |
| DOCKER_BUILDKIT: 1 | |
| jobs: | |
| main: | |
| runs-on: ubuntu-22.04 | |
| name: QGIS build | |
| timeout-minutes: 40 | |
| if: "!startsWith(github.event.head_commit.message, '[skip ci] ')" | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| version: | |
| # Last LTR | |
| - '3.28' | |
| - latest | |
| - master | |
| env: | |
| MAIN_BRANCH: '2.8' | |
| MAJOR_VERSION: '2.8' | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - uses: camptocamp/initialise-gopass-summon-action@v2 | |
| with: | |
| ci-gpg-private-key: ${{secrets.CI_GPG_PRIVATE_KEY}} | |
| github-gopass-ci-token: ${{secrets.GOPASS_CI_GITHUB_TOKEN}} | |
| patterns: docker | |
| if: env.HAS_SECRETS == 'HAS_SECRETS' | |
| - run: echo "${HOME}/.local/bin" >> ${GITHUB_PATH} | |
| - run: python3 -m pip install --user --requirement=ci/requirements.txt | |
| - run: scripts/get-version --auto-increment --github | |
| id: version | |
| if: env.HAS_SECRETS == 'HAS_SECRETS' | |
| - run: make build-runner | |
| - run: make build-test-db | |
| - name: Build QGIS server | |
| run: | | |
| docker build --target=runner --build-arg=VERSION=${{ matrix.version }} \ | |
| --build-arg=GEOMAPFISH_VERSION=$(scripts/get-version --major) \ | |
| --tag=camptocamp/geomapfish-qgisserver \ | |
| docker/qgisserver; | |
| docker tag camptocamp/geomapfish-qgisserver \ | |
| camptocamp/geomapfish-qgisserver:gmflatest-qgis${{ matrix.version }} | |
| - name: Test library availability | |
| run: | |
| "! ( docker run --rm camptocamp/geomapfish-qgisserver ldd /usr/local/bin/qgis_mapserv.fcgi | grep 'not | |
| found' )" | |
| - name: Acceptance tests | |
| run: | | |
| cd docker/qgisserver | |
| docker-compose up -d | |
| docker-compose exec -T tests /tests/wait-db | |
| docker-compose exec -T tests alembic --config=/tests/alembic.ini --name=main upgrade head | |
| docker-compose exec -T tests alembic --config=/tests/alembic.ini --name=static upgrade head | |
| docker-compose exec -T tests /tests/fill-db | |
| c2cciutils-docker-logs | |
| docker-compose exec -T tests /tests/acceptance-tests | |
| - run: c2cciutils-docker-logs | |
| if: failure() | |
| - run: docker-compose down | |
| - name: Publish feature branch | |
| run: | | |
| c2cciutils-publish --group=qgis-${{ matrix.version }} --docker-versions=${{ steps.version.outputs.versions }} --snyk-version=${{ steps.version.outputs.snyk_version }} | |
| if: > | |
| env.HAS_SECRETS == 'HAS_SECRETS' | |
| && steps.version.outputs.versions != '' |