main.yml

# Copyright (c) 2022-present, IO Visor Project
# SPDX-License-Identifier: Apache-2.0
#
# Copyright (c) 2022-present, IO Visor Project
# All rights reserved.
#
# This source code is licensed in accordance with the terms specified in
# the LICENSE file found in the root directory of this source tree.
#

name: Main

permissions:
  contents: write # Required by fuzzing task.
  security-events: write # Required by codeql task.
  actions: read

on:
  schedule:
    - cron: '00 21 * * *'

  push:
    branches:
      - 'main'

  pull_request:
    branches:
      - '*'

concurrency:
  group: main-${{ github.event.pull_request.number || github.sha }}
  cancel-in-progress: true

jobs:
  windows_release:
    uses: ./.github/workflows/windows.yml
    with:
      platform: windows-2019
      build_type: RelWithDebInfo
      upload_packages: true

  windows_release_no_retpolines:
    uses: ./.github/workflows/windows.yml
    with:
      platform: windows-2019
      build_type: RelWithDebInfo
      disable_retpolines: true

  windows_debug:
    uses: ./.github/workflows/windows.yml
    with:
      platform: windows-2019
      build_type: Debug

  windows_debug_no_retpolines:
    uses: ./.github/workflows/windows.yml
    with:
      platform: windows-2019
      build_type: Debug
      disable_retpolines: true

  macos_release:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: RelWithDebInfo
      upload_packages: true

  macos_release_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: RelWithDebInfo
      disable_retpolines: true

  macos_release_coverage:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: RelWithDebInfo
      enable_coverage: true

  macos_release_coverage_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: RelWithDebInfo
      enable_coverage: true
      disable_retpolines: true

  macos_release_sanitizers:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: RelWithDebInfo
      enable_sanitizers: true

  macos_release_sanitizers_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: RelWithDebInfo
      enable_sanitizers: true
      disable_retpolines: true


  macos_debug:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: Debug

  macos_debug_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: Debug
      disable_retpolines: true


  macos_debug_coverage:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: Debug
      enable_coverage: true

  macos_debug_coverage_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: Debug
      enable_coverage: true
      disable_retpolines: true

  macos_debug_sanitizers:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: Debug
      enable_sanitizers: true

  macos_debug_sanitizers_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: macos-latest
      build_type: Debug
      enable_sanitizers: true
      disable_retpolines: true

  linux_release:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: RelWithDebInfo
      upload_packages: true

  linux_release_arm64:
    uses: ./.github/workflows/posix.yml
    with:
      arch: arm64
      platform: ubuntu-latest
      build_type: RelWithDebInfo

  linux_release_scan_build:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: RelWithDebInfo
      scan_build: true

  linux_release_scan_build_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: RelWithDebInfo
      disable_retpolines: true

  linux_release_coverage:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: RelWithDebInfo
      enable_coverage: true

  linux_release_coverage_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: RelWithDebInfo
      enable_coverage: true
      disable_retpolines: true

  linux_release_arm64_coverage:
    uses: ./.github/workflows/posix.yml
    with:
      arch: arm64
      platform: ubuntu-latest
      build_type: RelWithDebInfo
      enable_coverage: true

  linux_release_sanitizers:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: RelWithDebInfo
      enable_sanitizers: true

  linux_release_sanitizers_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: RelWithDebInfo
      enable_sanitizers: true
      disable_retpolines: true

  # Disabled until https://github.com/iovisor/ubpf/issues/155 is resolved.
  # linux_release_arm64_sanitizers:
  #   uses: ./.github/workflows/posix.yml
  #   with:
  #     arch: arm64
  #     platform: ubuntu-latest
  #     build_type: RelWithDebInfo
  #     enable_sanitizers: true

  linux_debug:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: Debug

  linux_debug_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: Debug
      disable_retpolines: true

  linux_debug_arm64:
    uses: ./.github/workflows/posix.yml
    with:
      arch: arm64
      platform: ubuntu-latest
      build_type: Debug

  linux_debug_coverage:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: Debug
      enable_coverage: true

  linux_debug_coverage_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: Debug
      enable_coverage: true
      disable_retpolines: true

  linux_debug_arm64_coverage:
    uses: ./.github/workflows/posix.yml
    with:
      arch: arm64
      platform: ubuntu-latest
      build_type: Debug
      enable_coverage: true

  linux_debug_sanitizers:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: Debug
      enable_sanitizers: true

  linux_debug_sanitizers_no_retpolines:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: Debug
      enable_sanitizers: true
      disable_retpolines: true

  linux_release_codeql:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: RelWithDebInfo
      build_codeql: true

  linux_debug_codeql:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: Debug
      build_codeql: true

  linux_release_no_retpolines_codeql:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: RelWithDebInfo
      build_codeql: true
      disable_retpolines: true

  linux_debug_no_retpolines_codeql:
    uses: ./.github/workflows/posix.yml
    with:
      arch: x86_64
      platform: ubuntu-latest
      build_type: Debug
      build_codeql: true
      disable_retpolines: true

  fuzzing:
    uses: ./.github/workflows/fuzzing.yml
    with:
      regression_test: ${{ github.event_name == 'pull_request' || github.event_name == 'schedule' }}

  # Disabled until https://github.com/iovisor/ubpf/issues/155 is resolved.
  # linux_debug_arm64_sanitizers:
  #   uses: ./.github/workflows/posix.yml
  #   with:
  #     arch: arm64
  #     platform: ubuntu-latest
  #     build_type: Debug
  #     enable_sanitizers: true

  finish:
    needs:
      - macos_release_coverage
      - macos_release_coverage_no_retpolines
      - macos_debug_coverage
      - macos_debug_coverage_no_retpolines
      - linux_release_coverage
      - linux_debug_coverage
      - linux_release_arm64_coverage
      - linux_debug_arm64_coverage

    runs-on: ubuntu-latest
    steps:
    - name: Harden Runner
      uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
      with:
        egress-policy: audit

    - name: Coveralls Finished
      uses: coverallsapp/github-action@cfd0633edbd2411b532b808ba7a8b5e04f76d2c8 # v2.3.4
      with:
        github-token: ${{ secrets.github_token }}
        parallel-finished: true