-
Notifications
You must be signed in to change notification settings - Fork 1
73 lines (60 loc) · 1.69 KB
/
ci.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
---
name: CI
'on':
pull_request:
push:
branches:
- master
defaults:
run:
working-directory: ansible-mac-security
jobs:
lint:
name: Lint
runs-on: ubuntu-latest
steps:
- name: Check out the codebase.
uses: actions/checkout@v2
with:
path: ansible-mac-security
- name: Set up Python 3.
uses: actions/setup-python@v2
with:
python-version: '3.x'
- name: Install test dependencies.
run: pip3 install yamllint ansible-core ansible-lint
- name: Lint Yaml
continue-on-error: true
run: yamllint .
- name: Lint Ansible
continue-on-error: true
run: ansible-lint
- name: Run ShellCheck
uses: ludeeus/action-shellcheck@master
continue-on-error: true
integration:
name: Integration
runs-on: ${{ matrix.os }}
strategy:
matrix:
os:
- macos-latest
- macos-11
steps:
- name: Check out the codebase.
uses: actions/checkout@v2
with:
path: ansible-mac-security
- name: Test Installer Script
run: ./install.sh -t
- name: Test Playbook
run: ansible-playbook main.yml --skip-tags "homebrew" -vv
env:
ANSIBLE_FORCE_COLOR: '1'
- name: Idempotence check.
run: |
idempotence=$(mktemp)
ansible-playbook main.yml --skip-tags "homebrew,not-idempotent" | tee -a ${idempotence}
tail ${idempotence} | grep -q 'changed=0.*failed=0' && (echo 'Idempotence test: pass' && exit 0) || (echo 'Idempotence test: fail' && exit 1)
env:
ANSIBLE_FORCE_COLOR: '1'