74 lines
2.6 KiB
YAML
74 lines
2.6 KiB
YAML
name: PLEXALYZER Analysis
|
|
on:
|
|
pull_request:
|
|
types: [opened, synchronize]
|
|
|
|
jobs:
|
|
analyze:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout code
|
|
run: |
|
|
git fetch --all
|
|
git reset --hard $GITEA_COMMIT_SHA
|
|
|
|
- name: Get Changed Files and Save to File
|
|
id: get_changed_files
|
|
shell: bash
|
|
run: |
|
|
# Capture changed files and save to a temporary file
|
|
changed_files=$(git diff --name-only "${GITEA_BASE_SHA}" "${GITEA_HEAD_SHA}")
|
|
echo "$changed_files" | jq -R -s -c 'split("\n")[:-1]' > files_to_scan.json
|
|
echo "files_path=$(pwd)/files_to_scan.json" >> $GITEA_ENV
|
|
|
|
- name: Prepare Files List in Required Format
|
|
if: ${{ env.files_path }}
|
|
id: prepare_files
|
|
shell: bash
|
|
run: |
|
|
jq -r '.[]' "${env.files_path}" > files_to_analyze.txt
|
|
echo "files_to_analyze=$(pwd)/files_to_analyze.txt" >> $GITEA_ENV
|
|
|
|
- name: Run PLEXALYZER Docker Analysis
|
|
shell: bash
|
|
env:
|
|
PLEXALYZER_TOKEN: ${{ secrets.PLEXALYZER_TOKEN }}
|
|
MESSAGE_URL: 'https://api.covulor.dev.plexicus.com/receive_plexalyzer_message'
|
|
run: |
|
|
# Construct the Docker command
|
|
docker_command="docker run --rm \
|
|
-e PLEXALYZER_TOKEN=\"$PLEXALYZER_TOKEN\" \
|
|
-e MESSAGE_URL=\"$MESSAGE_URL\" \
|
|
-v \"${{ GITEA_WORKSPACE }}:/mounted_volumes\""
|
|
|
|
if [ -f "$(pwd)/files_to_analyze.txt" ]; then
|
|
docker_command+=" -v \"$(pwd)/files_to_analyze.txt:/app/files_to_analyze.txt\""
|
|
fi
|
|
|
|
docker_command+=" plexicus/plexalyzer-dev:latest \
|
|
/venvs/plexicus-fastapi/bin/python /app/analyze.py \
|
|
--repository_id \"${{ vars.COVULOR_REPO_ID }}\" \
|
|
--name \"${{ GITEA_REPO_NAME }}\" \
|
|
--branch \"${{ GITEA_BRANCH }}\" \
|
|
--url \"${{ GITEA_REPO_URL }}\" \
|
|
--no-progress-bar"
|
|
|
|
if [ -n "${{ GITEA_REPO_OWNER }}" ]; then
|
|
docker_command+=" --owner \"${{ GITEA_REPO_OWNER }}\""
|
|
fi
|
|
|
|
if [ -f "$(pwd)/files_to_analyze.txt" ]; then
|
|
docker_command+=" --files \"/app/files_to_analyze.txt\""
|
|
fi
|
|
|
|
analysis_output=$(eval $docker_command || true)
|
|
docker_exit_code=$?
|
|
|
|
echo "$analysis_output" > analysis_results.json
|
|
echo "findings_output=$(pwd)/analysis_results.json" >> $GITEA_ENV
|
|
echo "Docker command exit code: $docker_exit_code"
|
|
|
|
if [ $docker_exit_code -ne 0 ]; then
|
|
echo "WARNING: Docker command failed with exit code $docker_exit_code."
|
|
fi
|