mirror of
https://github.com/morluto/rea
synced 2026-10-26 06:16:17 -04:00
gongfpp
1b3d57ca8a
* docs(ci): add a repeatable static analysis example * fix(ci): isolate example reports and repair the guide link --------- Co-authored-by: gongfpp <22683417+gongfpp@users.noreply.github.com>
61 lines
2.4 KiB
YAML
61 lines
2.4 KiB
YAML
# Copy to .github/workflows/rea-analysis.yml on your default branch.
|
|
name: REA static analysis example
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
analyze:
|
|
runs-on: ubuntu-24.04
|
|
timeout-minutes: 10
|
|
env:
|
|
ARTIFACT_PATH: build/rea-ci-demo
|
|
steps:
|
|
- name: Prepare isolated report directory
|
|
id: reports
|
|
shell: bash
|
|
run: |
|
|
directory=$(mktemp -d "${RUNNER_TEMP:?}/rea-analysis.XXXXXX")
|
|
printf 'directory=%s\n' "${directory}" >> "${GITHUB_OUTPUT:?}"
|
|
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
|
|
with:
|
|
persist-credentials: false
|
|
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
|
|
with:
|
|
node-version: "24.22.1"
|
|
- name: Install pinned REA
|
|
run: |
|
|
npm install --prefix "${RUNNER_TEMP}/rea-tool" --no-audit --no-fund --ignore-scripts --save-exact rea-agents@6.7.0
|
|
echo "${RUNNER_TEMP}/rea-tool/node_modules/.bin" >> "${GITHUB_PATH}"
|
|
- name: Build a known artifact
|
|
id: build
|
|
run: |
|
|
# Replace this step with your reviewed build, keeping ARTIFACT_PATH in sync.
|
|
mkdir -p build/rea-ci-demo
|
|
printf '%s\n' '{"name":"rea-ci-demo","version":"1.0.0","type":"module","main":"index.js"}' > build/rea-ci-demo/package.json
|
|
printf '%s\n' 'export const message = "hello";' 'throw new Error("This artifact must not be executed.");' > build/rea-ci-demo/index.js
|
|
- name: Analyze and retain the original exit status
|
|
id: analyze
|
|
shell: bash
|
|
env:
|
|
REPORT_DIR: ${{ steps.reports.outputs.directory }}
|
|
run: |
|
|
set +e
|
|
rea analyze-javascript-application "${GITHUB_WORKSPACE}/${ARTIFACT_PATH}" --json --full-output \
|
|
> "${REPORT_DIR}/analysis.json" 2> "${REPORT_DIR}/analysis.stderr"
|
|
status=$?
|
|
set -e
|
|
printf '%s\n' "${status}" > "${REPORT_DIR}/exit-code.txt"
|
|
exit "${status}"
|
|
- name: Upload available reports, including after analysis failure
|
|
if: ${{ always() && steps.reports.outputs.directory != '' }}
|
|
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
|
|
with:
|
|
name: rea-analysis
|
|
path: ${{ steps.reports.outputs.directory }}
|
|
if-no-files-found: warn
|
|
retention-days: 7
|