Skip to content

Use gg_component for the user/group in container #2546

Use gg_component for the user/group in container

Use gg_component for the user/group in container #2546

Workflow file for this run

name: CI
on:
push:
branches:
- main
workflow_dispatch:
pull_request:
concurrency:
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
cancel-in-progress: true
jobs:
run-checks:
# To run all of the below checks locally, run `nix flake check -L`
timeout-minutes: 60
strategy:
fail-fast: false
matrix:
include:
- name: build with GCC
check: packages-default
- name: build with Clang
check: packages-ggl-clang
- name: cross-build for arm32 Musl
check: packages-ggl-musl-pi
- name: clang-tidy
check: clang-tidy
- name: header includes
check: iwyu
- name: editorconfig
check: editorconfig
- name: spelling
check: spelling
- name: cmake-lint
check: cmake-lint
- name: shellcheck
check: shellcheck
name: Check ${{ matrix.name }}
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4.1.1
with:
fetch-depth: 0
filter: "tree:0"
- uses: DeterminateSystems/nix-installer-action@main
- uses: DeterminateSystems/magic-nix-cache-action@main
- name: Check ${{ matrix.name }}
run:
nix build -L --log-lines 0 .#checks.x86_64-linux.${{ matrix.check }}
format-check:
timeout-minutes: 60
name: Check formatting
runs-on: ubuntu-latest
defaults:
run:
shell: nix develop -c bash -exo pipefail {0}
steps:
- uses: actions/checkout@v4.1.1
with:
fetch-depth: 0
filter: "tree:0"
- uses: DeterminateSystems/nix-installer-action@main
- uses: DeterminateSystems/magic-nix-cache-action@main
- name: Check formatting
id: formatting-check
run: nix build -L --log-lines 0 .#checks.x86_64-linux.formatting
- name: Generate / show patch
if: ${{ failure() && steps.formatting-check.outcome == 'failure' }}
run: |
nix fmt
git diff >> formatting.patch
git diff --color=always
- name: Upload patch
if: ${{ failure() && steps.formatting-check.outcome == 'failure' }}
uses: actions/upload-artifact@v3
with:
name: formatting_patch
path: formatting.patch
retention-days: 5
git-secrets:
timeout-minutes: 60
name: Check git-secrets
runs-on: ubuntu-latest
defaults:
run:
shell: nix develop -c bash -exo pipefail {0}
steps:
- uses: actions/checkout@v4.1.1
with:
fetch-depth: 0
filter: "tree:0"
- uses: DeterminateSystems/nix-installer-action@main
- uses: DeterminateSystems/magic-nix-cache-action@main
- name: Check git-secrets
run: |
git-secrets --register-aws
git-secrets --scan