rustification.yaml

name: rs

on:
  push:
    branches: [ main, stable, oldstable ]
  pull_request:

env: 
  CARGO_TERM_COLOR: always

jobs:
  unittests:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: rust
    strategy:
      matrix:
        toolchain:
          - stable
          - beta
          - nightly
    steps:
      - uses: actions/checkout@v3
      - run: sudo apt update && sudo apt-get install -y libpcap-dev
      - run: rustup update ${{ matrix.toolchain }} && rustup default ${{ matrix.toolchain }}
      - run: cargo test
  clippy:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: rust
    steps:
      - uses: actions/checkout@v3
      - run: rustup update stable && rustup default stable && rustup component add clippy
      - run: cargo clippy -- -D warnings
  audit:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: rust
    steps:
      - uses: actions/checkout@v3
      - run: rustup update stable && rustup default stable
      - run: cargo install cargo-audit
      - run: cargo audit
  typos:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: rust
    steps:
      - uses: actions/checkout@v3
      - run: rustup update stable && rustup default stable
      - run: cargo install typos-cli
      - run: typos
  formatting:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: rust
    strategy:
      matrix:
        crates:
          # we verify each dir separately to make it easier to verify formatting issues or even ignore
          # crates we deem not important for checking (e.g. feed-verifier)
          - nasl-syntax
          - storage
          - nasl-interpreter
          - redis-storage
          - json-storage
          - nasl-cli
    steps:
      - uses: actions/checkout@v3
  releases:
    runs-on:
     - ubuntu-20.04
    defaults:
      run:
        working-directory: rust
    steps:
      # install rustup
      - uses: actions/checkout@v3
      - uses: actions/cache@v3
        with:
          path: |
            ~/.cargo/bin/
            ~/.cargo/registry/index/
            ~/.cargo/registry/cache/
            ~/.cargo/git/db/
            rust/target/
          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
      - run: sudo apt update && sudo apt-get install -y libpcap-dev
      - run: rustup update stable && rustup default stable
      - run: cargo build --lib --release
      - run: cargo build --bins --release
      - name: archive nasl-cli
        uses: actions/upload-artifact@v3
        with:
          name: nasl-cli
          path: rust/target/release/nasl-cli
          retention-days: 1
      - name: archive feed-verifier
        uses: actions/upload-artifact@v3
        with:
          name: feed-verifier
          path: rust/target/release/feed-verifier
          retention-days: 1
  verify-syntax:
    runs-on: ubuntu-latest
    needs: [releases]
    steps:
      - uses: actions/checkout@v3
      - run: FEED_DIR="feed/" sh .github/prepare-feed.sh
      - uses: actions/download-artifact@v4.1.7
        with:
          name: nasl-cli
      - name: verify syntax parsing
        run: chmod a+x ./nasl-cli && ./nasl-cli syntax --quiet feed/
  verify-feed-update:
    runs-on: ubuntu-latest
    needs: [releases]
    container:
      # maybe better to use builder, build openvas to have
      # the version of this checkout rather than a dataed official one?
      image: greenbone/openvas-scanner:unstable
      options: --privileged
    services:
      redis:
        image: redis
        options: >-
          --health-cmd "redis-cli ping"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
    steps:
      - uses: actions/checkout@v3
      - run: apt-get update && apt-get install -y docker.io
      - run: FEED_DIR="feed/" sh .github/prepare-feed.sh
      - uses: actions/download-artifact@v4.1.7
        with:
          name: nasl-cli
      - uses: actions/download-artifact@v4.1.7
        with:
          name: feed-verifier
      - name: prepare setup
        run: |
          install -m 755 feed-verifier /usr/local/bin/
          install -m 755 nasl-cli /usr/local/bin/
          echo "db_address = tcp://redis:6379" >> /etc/openvas/openvas.conf
          mv ./feed/* "$(openvas -s | grep plugins_folder | sed 's/plugins_folder = //')/"
      - run: openvas -s
      - run: feed-verifier || (cat /var/log/gvm/openvas.log && false)