psalm/.github/workflows/shepherd.yml

name: Run Shepherd

on: [push, pull_request]

permissions:
  contents: read

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4
    - uses: shivammathur/setup-php@v2
      with:
        php-version: '8.2'
        ini-values: zend.assertions=1
        tools: composer:v2
        coverage: none
      env:
        fail-fast: true

    - name: Install dependencies
      run: composer install --prefer-dist --no-progress --no-suggest
      env:
        COMPOSER_ROOT_VERSION: dev-master

    - name: Run Psalm
      run: ./psalm --threads=2 --output-format=github --shepherd
Fix name 2019-12-02 22:18:47 -05:00			`name: Run Shepherd`
Add Psalm again 2019-12-02 22:18:16 -05:00
Run on pull_request too 2020-02-24 11:31:20 -05:00			`on: [push, pull_request]`
Add Psalm again 2019-12-02 22:18:16 -05:00
chore: Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> 2022-06-28 00:29:16 +00:00			`permissions:`
			`contents: read`

Add Psalm again 2019-12-02 22:18:16 -05:00			`jobs:`
			`build:`
			`runs-on: ubuntu-latest`

			`steps:`
Bump actions/checkout from 3 to 4 Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> 2023-09-11 07:29:32 +00:00			`- uses: actions/checkout@v4`
Run Shepherd with 8.0 Because installing packages with 8.1 and checking them as if we're running 7.1 just doesn't work. 2022-05-29 00:44:18 -04:00			`- uses: shivammathur/setup-php@v2`
			`with:`
Test CI on 8.2 2022-11-24 19:30:11 +01:00			`php-version: '8.2'`
Run assertions on CI 2023-02-16 10:45:42 +01:00			`ini-values: zend.assertions=1`
			`tools: composer:v2`
			`coverage: none`
Refuse to use PHP versions we did not request There were a number of test failures caused by setup-php failing to install the required PHP version. While we certainly should fix our failing tests, we also need to be sure which PHP version we're using. This PR does exactly that. 2023-03-12 01:45:23 -04:00			`env:`
			`fail-fast: true`
Add Psalm again 2019-12-02 22:18:16 -05:00
			`- name: Install dependencies`
Fix: Set environment variable via env section (#2598) 2020-01-12 16:39:08 +01:00			`run: composer install --prefer-dist --no-progress --no-suggest`
			`env:`
			`COMPOSER_ROOT_VERSION: dev-master`

Add Psalm again 2019-12-02 22:18:16 -05:00			`- name: Run Psalm`
Add support for Github Actions output Fixes #2678 2020-01-23 07:14:48 -05:00			`run: ./psalm --threads=2 --output-format=github --shepherd`