Moving I/O (aka communication) layer outside powHSM code (#189) #32
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Code coverage" | |
| on: | |
| push: | |
| branches: [ "master" ] | |
| jobs: | |
| coverage: | |
| name: Run tests and generate coverage reports | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - name: Checkout this repo | |
| uses: actions/checkout@v3 | |
| - name: Build the middleware docker image | |
| run: docker/mware/build | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| aws-access-key-id: ${{ secrets.CODECOVERAGE_AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.CODECOVERAGE_AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ${{ secrets.CODECOVERAGE_AWS_REGION }} | |
| - name: Run middleware coverage script | |
| run: | | |
| middleware/test-all-coverage | |
| COVPCT=$(cat middleware/coverage/total) | |
| COVCOL=$(utils/coverage-color.sh $COVPCT) | |
| echo "{ \"schemaVersion\": 1, \"label\": \"Middleware coverage\", \"message\": \"$COVPCT%\", \"color\": \"$COVCOL\" }" > middleware/coverage/badge.json | |
| - name: "Upload middleware coverage report" | |
| run: | | |
| aws s3 sync \ | |
| middleware/coverage/ \ | |
| s3://${{ secrets.CODECOVERAGE_S3_BUCKET }}/powhsm_5.1.x/middleware_coverage_report \ | |
| --sse aws:kms --sse-kms-key-id ${{ secrets.CODECOVERAGE_KMS_KEY_ID }} \ | |
| --no-progress --follow-symlinks --delete --only-show-errors | |
| - name: Run firmware coverage script | |
| run: | | |
| firmware/coverage/gen-coverage | |
| COVPCT=$(cat firmware/coverage/output/total) | |
| COVCOL=$(utils/coverage-color.sh $COVPCT) | |
| echo "{ \"schemaVersion\": 1, \"label\": \"Firmware coverage\", \"message\": \"$COVPCT%\", \"color\": \"$COVCOL\" }" > firmware/coverage/output/badge.json | |
| - name: "Upload firmware coverage report" | |
| run: | | |
| aws s3 sync \ | |
| firmware/coverage/output/ \ | |
| s3://${{ secrets.CODECOVERAGE_S3_BUCKET }}/powhsm_5.1.x/firmware_coverage_report \ | |
| --sse aws:kms --sse-kms-key-id ${{ secrets.CODECOVERAGE_KMS_KEY_ID }} \ | |
| --no-progress --follow-symlinks --delete --only-show-errors | |
| - name: Invalidate CloudFront cache | |
| run: | | |
| aws cloudfront create-invalidation \ | |
| --distribution-id ${{ secrets.CODECOVERAGE_CLOUDFRONT_DIST_ID }} --paths "/*" |