yetus.yml

# NOTE that this is the only workflow that requires access to the
# GitHub token. However, it is safe since in EVE repo itself we
# only trigger this workflow on pull requests and as such making
# it effectively read-only.
# yamllint disable rule:line-length
#   https://docs.github.com/en/free-pro-team@latest/actions/reference/authentication-in-a-workflow#permissions-for-the-github_token
# yamllint enable rule:line-length
---
name: Apache Yetus
on:  # yamllint disable-line rule:truthy
  pull_request:
    branches:
      - main

jobs:
  yetus:
    runs-on: ubuntu-20.04
    steps:
      - name: Checkout
        uses: actions/checkout@v3
        with:
          path: src
          fetch-depth: 0

      - name: Yetus
        uses: apache/yetus-test-patch-action@0.14.1
        with:
          basedir: ./src
          buildtool: nobuild
          continuousimprovement: true
          githubtoken: ${{ secrets.GITHUB_TOKEN }}
          patchdir: ./out
          reviveconfig: .revive.toml

      - name: Store Yetus artifacts
        if: ${{ always() }}
        uses: actions/upload-artifact@v3
        with:
          name: 'yetus-scan'
          path: ${{ github.workspace }}/out