[Snyk] Fix for 11 vulnerabilities #12
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Coverage Linux | |
| on: | |
| pull_request: | |
| types: [opened, synchronize, reopened, ready_for_review] | |
| paths-ignore: | |
| - '**.md' | |
| - benchmark/** | |
| - deps/* | |
| - doc/** | |
| - .github/** | |
| - '!.github/workflows/coverage-linux.yml' | |
| push: | |
| branches: | |
| - main | |
| paths-ignore: | |
| - '**.md' | |
| - benchmark/** | |
| - deps/** | |
| - doc/** | |
| - .github/** | |
| - '!.github/workflows/coverage-linux.yml' | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} | |
| cancel-in-progress: true | |
| env: | |
| PYTHON_VERSION: '3.11' | |
| FLAKY_TESTS: keep_retrying | |
| permissions: | |
| contents: read | |
| jobs: | |
| coverage-linux: | |
| if: github.event.pull_request.draft == false | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Python ${{ env.PYTHON_VERSION }} | |
| uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0 | |
| with: | |
| python-version: ${{ env.PYTHON_VERSION }} | |
| - name: Environment Information | |
| run: npx envinfo | |
| - name: Install gcovr | |
| run: pip install gcovr==4.2 | |
| - name: Build | |
| run: make build-ci -j2 V=1 CONFIG_FLAGS="--error-on-warn --coverage" | |
| # TODO(bcoe): fix the couple tests that fail with the inspector enabled. | |
| # The cause is most likely coverage's use of the inspector. | |
| - name: Test | |
| run: NODE_V8_COVERAGE=coverage/tmp make test-cov -j2 V=1 TEST_CI_ARGS="-p dots --measure-flakiness 9" || exit 0 | |
| - name: Report JS | |
| run: npx c8 report --check-coverage | |
| env: | |
| NODE_OPTIONS: --max-old-space-size=8192 | |
| - name: Report C++ | |
| run: cd out && gcovr --gcov-exclude='.*\b(deps|usr|out|obj|cctest|embedding)\b' -v -r Release/obj.target --xml -o ../coverage/coverage-cxx.xml --root=$(cd ../ && pwd) | |
| # Clean temporary output from gcov and c8, so that it's not uploaded: | |
| - name: Clean tmp | |
| run: rm -rf coverage/tmp && rm -rf out | |
| - name: Upload | |
| uses: codecov/codecov-action@d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70 # v3.1.1 | |
| with: | |
| directory: ./coverage |