Skip to content

Smoketest

Smoketest #18

name: rs
on:
push:
branches: [main, stable, oldstable]
pull_request:
env:
CARGO_TERM_COLOR: always
jobs:
unittests:
runs-on: ubuntu-latest
defaults:
run:
working-directory: rust
strategy:
matrix:
toolchain:
- stable
- beta
- nightly
steps:
- uses: actions/checkout@v3
- run: sudo apt update && sudo apt-get install -y libpcap-dev
- run: rustup update ${{ matrix.toolchain }} && rustup default ${{ matrix.toolchain }} || rustup default ${{ matrix.toolchain }}
- run: cargo test
clippy:
runs-on: ubuntu-latest
defaults:
run:
working-directory: rust
steps:
- uses: actions/checkout@v3
- run: rustup update stable && rustup default stable && rustup component add clippy
- run: cargo clippy -- -D warnings
audit:
runs-on: ubuntu-latest
defaults:
run:
working-directory: rust
steps:
- uses: actions/checkout@v3
- run: rustup update stable && rustup default stable
- run: cargo install cargo-audit
- run: cargo audit
typos:
runs-on: ubuntu-latest
defaults:
run:
working-directory: rust
steps:
- uses: actions/checkout@v3
- run: rustup update stable && rustup default stable
- run: cargo install typos-cli
- run: typos
formatting:
runs-on: ubuntu-latest
defaults:
run:
working-directory: rust
strategy:
matrix:
crates:
# we verify each dir separately to make it easier to verify formatting issues or even ignore
# crates we deem not important for checking (e.g. feed-verifier)
- nasl-syntax
- storage
- nasl-interpreter
- redis-storage
- json-storage
- nasl-cli
steps:
- uses: actions/checkout@v3
rs-build-binaries:
uses: ./.github/workflows/build-rust.yml
verify-syntax:
runs-on: ubuntu-latest
needs: [rs-build-binaries]
steps:
- uses: actions/checkout@v3
- run: FEED_DIR="feed/" sh .github/prepare-feed.sh
- uses: actions/download-artifact@v3
with:
name: rs-binaries
path: assets
- run: mv assets/nasl-cli-x86_64-unknown-linux-gnu ./nasl-cli
- run: chmod +x ./nasl-cli
- name: verify syntax parsing
run: ./nasl-cli syntax --quiet feed/
verify-feed-update:
runs-on: ubuntu-latest
needs: [rs-build-binaries]
container:
# maybe better to use builder, build openvas to have
# the version of this checkout rather than a dataed official one?
image: greenbone/openvas-scanner:unstable
options: --privileged
services:
redis:
image: redis
options: >-
--health-cmd "redis-cli ping"
--health-interval 10s
--health-timeout 5s
--health-retries 5
steps:
- uses: actions/checkout@v3
- run: apt-get update && apt-get install -y docker.io
- run: FEED_DIR="feed/" sh .github/prepare-feed.sh
- uses: actions/download-artifact@v3
with:
name: rs-binaries
path: assets
- run: mv assets/nasl-cli-x86_64-unknown-linux-gnu ./nasl-cli
- run: mv assets/feed-verifier-x86_64-unknown-linux-gnu ./feed-verifier
- name: prepare setup
run: |
install -m 755 feed-verifier /usr/local/bin/
install -m 755 nasl-cli /usr/local/bin/
echo "db_address = tcp://redis:6379" >> /etc/openvas/openvas.conf
mv ./feed/* "$(openvas -s | grep plugins_folder | sed 's/plugins_folder = //')/"
- run: openvas -s
- run: feed-verifier || (cat /var/log/gvm/openvas.log && false)