checkers-action.yml

name: Checkers-Action

on:
  push:
    branches: [ main ]
    paths:
      - 'cve_bin_tool/checkers/**/*.py'
  pull_request:
    branches: [ main ]
    paths:
      - 'cve_bin_tool/checkers/**/*.py'

jobs:
  run-script:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Get date 
        id: get-date 
        run: | 
          echo "date=$(/bin/date -u "+%Y%m%d")" >> $GITHUB_OUTPUT 
          echo "yesterday=$(/bin/date -d "-1 day" -u "+%Y%m%d")" >> $GITHUB_OUTPUT 

      - name: Print Cache Keys 
        run: | 
          echo "Today's Cache Key: Linux-cve-bin-tool-${{ steps.get-date.outputs.date }}" 
          echo "Yesterday's Cache Key: Linux-cve-bin-tool-${{ steps.get-date.outputs.yesterday }}" 

      - name: Get today's cached database 
        uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0 
        id: todays-cache 
        with: 
          path: cache 
          key: Linux-cve-bin-tool-${{ steps.get-date.outputs.date }} 

      - name: Get yesterday's cached database if today's is not available 
        uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0 
        if: steps.todays-cache.outputs.cache-hit != 'true' 
        with: 
          path: cache 
          key: Linux-cve-bin-tool-${{ steps.get-date.outputs.yesterday }}  

      - name: Install cve-bin-tool
        if: env.sbom != 'true'
        run: |
          python -m pip install --upgrade pip
          python -m pip install --upgrade setuptools
          python -m pip install --upgrade wheel
          python -m pip install --upgrade -r dev-requirements.txt
          python -m pip install --upgrade .
          
      - name: Try single CLI run of tool
        if: env.sbom != 'true'
        run: |
          [[ -e cache ]] && mkdir -p .cache && mv cache ~/.cache/cve-bin-tool
          NO_EXIT_CVE_NUM=1 python -m cve_bin_tool.cli test/assets/test-kerberos-5-1.15.1.out
          cp -r ~/.cache/cve-bin-tool cache

      - name: Get changed files in checkers directory
        id: changed-files
        run: |
          files=$(git diff --name-only ${{ github.sha }} ${{ github.event.before }} | grep '^cve_bin_tool/checkers/' | xargs)
          echo "::set-output name=files::$files"
        shell: bash

      - name: Run Python script
        run: |
          IFS=' ' read -r -a files <<< "${{ steps.changed-files.outputs.files }}"
          for file in "${files[@]}"; do
            python cve_bin_tool/ci_pre_checker.py "$file"
          done
        shell: bash