Use newer tarfile to handle bundles more safely #71
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test and upload Python package | |
| on: | |
| pull_request: | |
| push: | |
| branches: [master] | |
| tags: | |
| - 'v*' | |
| - '!v*-dev' | |
| env: | |
| ZEEKROOT: /usr/local/zeek | |
| jobs: | |
| test: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| # Test Zeek LTS, latest, and nightly, and | |
| # don't fail for the nightly one. | |
| include: | |
| - repo: zeek | |
| version: latest | |
| continue_on_error: false | |
| - repo: zeek | |
| version: lts | |
| continue_on_error: false | |
| - repo: zeek-dev | |
| version: latest | |
| continue_on_error: true | |
| runs-on: ubuntu-latest | |
| continue-on-error: ${{ matrix.continue_on_error }} | |
| container: | |
| image: zeek/${{ matrix.repo }}:${{ matrix.version }} | |
| steps: | |
| - name: Install build environment | |
| run: | | |
| apt-get update | |
| apt-get install -y --no-install-recommends cmake g++ libssl-dev libpcap-dev make | |
| - name: Remove zkg installation | |
| # Rule out confusion between test environment and pre-existing zkg: | |
| run: | | |
| rm $ZEEKROOT/bin/zkg $ZEEKROOT/share/man/man1/zkg.1 | |
| rm -r $ZEEKROOT/etc/zkg | |
| rm -r $ZEEKROOT/lib/zeek/python/zeekpkg | |
| rm -r $ZEEKROOT/var/lib/zkg | |
| - uses: actions/checkout@v4 | |
| - name: Run unit tests | |
| run: btest -j -A -d -c testing/btest.cfg | |
| - uses: actions/upload-artifact@v4 | |
| if: failure() | |
| with: | |
| name: btest-${{ matrix.repo }}-${{ matrix.version }} | |
| path: testing/.tmp/ | |
| upload: | |
| runs-on: ubuntu-latest | |
| needs: [test] | |
| if: github.repository == 'zeek/package-manager' && github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Check release version | |
| # This fails e.g. if VERSION contains a dev commits suffix, | |
| # since we don't want to push these to PyPI. Accepts two- | |
| # and three-component version numbers (e.g. 1.0 and 1.0.1). | |
| run: | | |
| grep -E -x '[0-9]+\.[0-9]+(\.[0-9]+)?' VERSION | |
| - name: Build wheel | |
| run: | | |
| make dist | |
| - name: Upload to PyPI | |
| uses: pypa/gh-action-pypi-publish@release/v1 | |
| with: | |
| user: __token__ | |
| password: ${{ secrets.PYPI_API_TOKEN }} |