feat(error-handler): add ErrorHandlerInterceptor plugin #1694
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: 🔐 Security analysis | |
| on: # yamllint disable-line rule:truthy | |
| pull_request: | |
| push: | |
| branches: [1.x] | |
| # `head_ref` is the PR source branch on `pull_request` events and empty on `push` | |
| # (falls back to `github.ref` = `refs/heads/<branch>`). Different PRs from different | |
| # branches → different groups, so they never cross-cancel. Same PR pushed again | |
| # → same group, the new run cancels the previous one. | |
| # | |
| # `cancel-in-progress` is only enabled on PR events: pushes to the default branch | |
| # (1.x) keep their full history of CI runs. | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.ref }} | |
| cancel-in-progress: ${{ github.event_name == 'pull_request' }} | |
| jobs: | |
| security-analysis: | |
| timeout-minutes: 4 | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: true | |
| matrix: | |
| os: | |
| - ubuntu-latest | |
| php-version: | |
| - '8.2' | |
| dependencies: | |
| - locked | |
| steps: | |
| - name: 📦 Check out the codebase | |
| uses: actions/checkout@v7 | |
| # The split sub-packages pin testo/testo; in CI the root is a detached | |
| # commit (dev-<sha>), so its version must be declared explicitly. | |
| - name: 🏷️ Resolve root package version | |
| run: echo "COMPOSER_ROOT_VERSION=$(jq -r '.["."]' resources/version.json)" >> "$GITHUB_ENV" | |
| - name: 🛠️ Setup PHP | |
| uses: shivammathur/setup-php@v2 | |
| with: | |
| php-version: ${{ matrix.php-version }} | |
| ini-values: error_reporting=E_ALL | |
| coverage: none | |
| - name: 🛠️ Setup problem matchers | |
| run: echo "::add-matcher::${{ runner.tool_cache }}/php.json" | |
| - name: 🤖 Validate composer.json and composer.lock | |
| run: composer validate --ansi --strict | |
| - name: 📥 Install dependencies with composer | |
| uses: ramsey/composer-install@v3 | |
| with: | |
| dependency-versions: ${{ matrix.dependencies }} | |
| - name: 🐛 Check installed packages for security vulnerability advisories | |
| run: composer audit --ansi |