mirror of
https://github.com/morluto/rea.git
synced 2026-10-26 17:35:11 +00:00
docs(ci): add a repeatable static analysis example (#6496)
* docs(ci): add a repeatable static analysis example * fix(ci): isolate example reports and repair the guide link --------- Co-authored-by: gongfpp <22683417+gongfpp@users.noreply.github.com>
This commit is contained in:
1 parent
fd782cf2b1
commit
1b3d57ca8a
4 files changed
+394
No files matched your search
@@ -0,0 +1,60 @@
|
||||
# Copy to .github/workflows/rea-analysis.yml on your default branch.
|
||||
name: REA static analysis example
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
analyze:
|
||||
runs-on: ubuntu-24.04
|
||||
timeout-minutes: 10
|
||||
env:
|
||||
ARTIFACT_PATH: build/rea-ci-demo
|
||||
steps:
|
||||
- name: Prepare isolated report directory
|
||||
id: reports
|
||||
shell: bash
|
||||
run: |
|
||||
directory=$(mktemp -d "${RUNNER_TEMP:?}/rea-analysis.XXXXXX")
|
||||
printf 'directory=%s\n' "${directory}" >> "${GITHUB_OUTPUT:?}"
|
||||
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
|
||||
with:
|
||||
persist-credentials: false
|
||||
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
|
||||
with:
|
||||
node-version: "24.22.1"
|
||||
- name: Install pinned REA
|
||||
run: |
|
||||
npm install --prefix "${RUNNER_TEMP}/rea-tool" --no-audit --no-fund --ignore-scripts --save-exact rea-agents@6.7.0
|
||||
echo "${RUNNER_TEMP}/rea-tool/node_modules/.bin" >> "${GITHUB_PATH}"
|
||||
- name: Build a known artifact
|
||||
id: build
|
||||
run: |
|
||||
# Replace this step with your reviewed build, keeping ARTIFACT_PATH in sync.
|
||||
mkdir -p build/rea-ci-demo
|
||||
printf '%s\n' '{"name":"rea-ci-demo","version":"1.0.0","type":"module","main":"index.js"}' > build/rea-ci-demo/package.json
|
||||
printf '%s\n' 'export const message = "hello";' 'throw new Error("This artifact must not be executed.");' > build/rea-ci-demo/index.js
|
||||
- name: Analyze and retain the original exit status
|
||||
id: analyze
|
||||
shell: bash
|
||||
env:
|
||||
REPORT_DIR: ${{ steps.reports.outputs.directory }}
|
||||
run: |
|
||||
set +e
|
||||
rea analyze-javascript-application "${GITHUB_WORKSPACE}/${ARTIFACT_PATH}" --json --full-output \
|
||||
> "${REPORT_DIR}/analysis.json" 2> "${REPORT_DIR}/analysis.stderr"
|
||||
status=$?
|
||||
set -e
|
||||
printf '%s\n' "${status}" > "${REPORT_DIR}/exit-code.txt"
|
||||
exit "${status}"
|
||||
- name: Upload available reports, including after analysis failure
|
||||
if: ${{ always() && steps.reports.outputs.directory != '' }}
|
||||
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
|
||||
with:
|
||||
name: rea-analysis
|
||||
path: ${{ steps.reports.outputs.directory }}
|
||||
if-no-files-found: warn
|
||||
retention-days: 7
|
||||
Reference in new issue
Block a user