nextcloud-server/.github/workflows/static-code-analysis.yml

name: Static code analysis

on: [pull_request]

jobs:
    static-code-analysis:
        runs-on: ubuntu-latest

        if: ${{ github.repository_owner != 'nextcloud-gmbh' }}

        steps:
            - uses: actions/checkout@v2
            - name: Checkout submodules
              shell: bash
              run: |
                auth_header="$(git config --local --get http.https://github.com/.extraheader)"
                git submodule sync --recursive
                git -c "http.extraheader=$auth_header" -c protocol.version=2 submodule update --init --force --recursive --depth=1
            - name: Set up php7.4
              uses: shivammathur/setup-php@master
              with:
                php-version: 7.4
                extensions: apcu,ctype,curl,dom,fileinfo,ftp,gd,intl,json,ldap,mbstring,openssl,pdo_sqlite,posix,sqlite,xml,zip
                coverage: none
              env:
                GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

            - name: Composer install
              run: composer i
            - name: Psalm
              run: composer run psalm -- --monochrome --no-progress --output-format=github --update-baseline || ( git diff -- . ':!lib/composer' && exit 1 )
            - name: Check diff
              run: git diff -- . ':!lib/composer'
            - name: Show potential changes in Psalm baseline
              run: |
                bash -c "[[ ! \"`git status --porcelain build/psalm-baseline.xml`\" ]] || ( echo 'Uncommited changes in Psalm baseline' && git status && git diff build/psalm-baseline.xml)"

    static-code-analysis-ocp:
        runs-on: ubuntu-latest

        if: ${{ github.repository_owner != 'nextcloud-gmbh' }}

        steps:
            - uses: actions/checkout@v2
            - name: Checkout submodules
              shell: bash
              run: |
                auth_header="$(git config --local --get http.https://github.com/.extraheader)"
                git submodule sync --recursive
                git -c "http.extraheader=$auth_header" -c protocol.version=2 submodule update --init --force --recursive --depth=1
            - name: Set up php7.4
              uses: shivammathur/setup-php@master
              with:
                php-version: 7.4
                extensions: apcu,ctype,curl,dom,fileinfo,ftp,gd,intl,json,ldap,mbstring,openssl,pdo_sqlite,posix,sqlite,xml,zip
                coverage: none
              env:
                GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
            - name: Composer install
              run: composer i
            - name: Psalm
              run: composer run psalm -- -c psalm-ocp.xml --monochrome --no-progress --output-format=github --update-baseline || ( git diff -- . ':!lib/composer' && exit 1 )
            - name: Check diff
              run: git diff -- . ':!lib/composer'
            - name: Show potential changes in Psalm baseline
              run: |
                bash -c "[[ ! \"`git status --porcelain build/psalm-baseline-ocp.xml`\" ]] || ( echo 'Uncommited changes in Psalm baseline' && git status && git diff build/psalm-baseline.xml)"