UltimateAuth/.github/workflows/ultimateauth-ci.yml at dev · CodeBeamOrg/UltimateAuth · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
name: UltimateAuth CI

on:
  push:
    branches:
      - dev
      - 'release/**'
    tags:
      - 'v*'
  pull_request:
    branches:
      - dev
      - 'release/**'
  workflow_dispatch:

jobs:
  build-test-coverage:
    name: Build, Test & Coverage
    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        dotnet-version: ['8.0.x', '9.0.x', '10.0.x']

    steps:
    - name: 📥 Checkout repository
      uses: actions/checkout@v4

    - name: 🧰 Setup .NET SDK ${{ matrix.dotnet-version }}
      uses: actions/setup-dotnet@v4
      with:
        dotnet-version: ${{ matrix.dotnet-version }}

    - name: 📦 Restore dependencies
      run: dotnet restore

    - name: 🏗️ Build
      run: dotnet build --configuration Release --no-restore

    - name: 🧪 Test with coverage
      run: |
        dotnet test \
          --configuration Release \
          --no-build \
          --filter "FullyQualifiedName!~CodeBeam.UltimateAuth.IdentityLab.Tests" \
          --collect:"XPlat Code Coverage"

    - name: Upload coverage reports to Codecov
      uses: codecov/codecov-action@v5
      with:
        token: ${{ secrets.CODECOV_TOKEN }}
        slug: CodeBeamOrg/UltimateAuth
        flags: framework


  identity-lab-security:
    name: Identity Lab security
    runs-on: ubuntu-latest
    timeout-minutes: 20

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup .NET 10
        uses: actions/setup-dotnet@v4
        with:
          dotnet-version: '10.0.x'

      - name: Run Identity Lab tests with coverage
        run: >-
          dotnet test tests/CodeBeam.UltimateAuth.IdentityLab.Tests
          --configuration Release
          --collect:"XPlat Code Coverage"
          --logger "trx;LogFileName=identity-lab.trx"
          --results-directory TestResults/IdentityLab
          --settings tests/CodeBeam.UltimateAuth.IdentityLab.Tests/identity-lab.runsettings

      - name: Generate Identity Lab coverage summary
        if: always()
        shell: bash
        run: |
          python3 - <<'PY'
          import glob
          import os
          import xml.etree.ElementTree as ET

          reports = glob.glob(
              "TestResults/IdentityLab/**/coverage.cobertura.xml",
              recursive=True
          )

          summary_path = os.environ["GITHUB_STEP_SUMMARY"]

          with open(summary_path, "a", encoding="utf-8") as output:
              output.write("## Identity Lab Coverage\n\n")

              if not reports:
                  output.write("Coverage report was not generated.\n")
                  raise SystemExit(0)

              reports = [
                  path for path in reports
                  if "/In/" not in path.replace("\\", "/")
              ]

              if not reports:
                  output.write("No usable coverage report found.\n")
                  raise SystemExit(0)

              report = ET.parse(reports[0]).getroot()

              line_rate = float(report.attrib.get("line-rate", 0))
              branch_rate = float(report.attrib.get("branch-rate", 0))
              lines_valid = int(report.attrib.get("lines-valid", 0))
              lines_covered = int(report.attrib.get("lines-covered", 0))
              branches_valid = int(report.attrib.get("branches-valid", 0))
              branches_covered = int(report.attrib.get("branches-covered", 0))

              output.write("| Metric | Coverage |\n")
              output.write("|---|---:|\n")
              output.write(f"| Lines | {line_rate:.2%} |\n")
              output.write(f"| Branches | {branch_rate:.2%} |\n")
              output.write(
                  f"| Covered lines | {lines_covered:,} / {lines_valid:,} |\n"
              )
              output.write(
                  f"| Covered branches | {branches_covered:,} / {branches_valid:,} |\n"
              )
              output.write("\n")
              output.write(
                  "Coverage is reported separately from UltimateAuth "
                  "framework coverage.\n"
              )
          PY

      - name: Upload Identity Lab test and coverage results
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: identity-lab-test-results
          path: TestResults/IdentityLab