Workflows

Author: PDowney

.github/workflows/wp-compatibility-test.yml

@@ -155,7 +155,7 @@ jobs:
       - name: Run PHPCS
         run: |
           # Use WordPress-Core standard which has fewer dependencies
-          phpcs --standard=WordPress-extra --extensions=php --ignore=vendor,tests,node_modules . || exit 0
+          phpcs --standard=WordPress-extra --extensions=php --ignore=vendor,tests,node_modules,.github,.vscode . || exit 0
 
       - name: Create issue on PHPCS failure
         if: ${{ failure() }}
@@ -226,6 +226,7 @@ jobs:
               <exclude-pattern>*/languages/*</exclude-pattern>
               <exclude-pattern>*/.git/*</exclude-pattern>
               <exclude-pattern>*/.github/*</exclude-pattern>
+              <exclude-pattern>*/.vscode/*</exclude-pattern>
               <exclude-pattern>*.js</exclude-pattern>
               <exclude-pattern>*.css</exclude-pattern>
 
@@ -474,41 +475,41 @@ jobs:
           echo "🔍 Checking for common security issues..."
           
           # Check for potential SQL injection patterns
-          if grep -r "mysql_query\|mysqli_query" --include="*.php" . 2>/dev/null; then
+          if grep -r "mysql_query\|mysqli_query" --include="*.php" --exclude-dir=.github --exclude-dir=.vscode . 2>/dev/null; then
             echo "⚠️ Warning: Direct database queries found - ensure proper sanitization"
           fi
           
           # Check for potential XSS vulnerabilities (missing escaping)
-          if grep -r "echo \$_\|print \$_" --include="*.php" . 2>/dev/null; then
+          if grep -r "echo \$_\|print \$_" --include="*.php" --exclude-dir=.github --exclude-dir=.vscode . 2>/dev/null; then
             echo "⚠️ Warning: Potential XSS vulnerability - ensure output is escaped"
           fi
           
           # Check for file inclusion vulnerabilities
-          if grep -r "include.*\$_\|require.*\$_" --include="*.php" . 2>/dev/null; then
+          if grep -r "include.*\$_\|require.*\$_" --include="*.php" --exclude-dir=.github --exclude-dir=.vscode . 2>/dev/null; then
             echo "⚠️ Warning: Potential file inclusion vulnerability found"
           fi
           
           # Check for eval() usage (security risk)
-          if grep -r "eval(" --include="*.php" . 2>/dev/null; then
+          if grep -r "eval(" --include="*.php" --exclude-dir=.github --exclude-dir=.vscode . 2>/dev/null; then
             echo "⚠️ Warning: eval() function usage detected - security risk"
           fi
           
           # Check for proper nonce usage
-          if grep -r "wp_nonce_field\|wp_verify_nonce" --include="*.php" . >/dev/null 2>&1; then
+          if grep -r "wp_nonce_field\|wp_verify_nonce" --include="*.php" --exclude-dir=.github --exclude-dir=.vscode . >/dev/null 2>&1; then
             echo "✅ WordPress nonce usage detected - good security practice"
           else
             echo "ℹ️ Info: Consider adding WordPress nonces for form security"
           fi
           
           # Check for proper sanitization functions
-          if grep -r "sanitize_\|esc_" --include="*.php" . >/dev/null 2>&1; then
+          if grep -r "sanitize_\|esc_" --include="*.php" --exclude-dir=.github --exclude-dir=.vscode . >/dev/null 2>&1; then
             echo "✅ WordPress sanitization functions detected - good security practice"
           else
             echo "⚠️ Warning: Limited use of WordPress sanitization functions"
           fi
           
           # Check for capability checks
-          if grep -r "current_user_can\|user_can" --include="*.php" . >/dev/null 2>&1; then
+          if grep -r "current_user_can\|user_can" --include="*.php" --exclude-dir=.github --exclude-dir=.vscode . >/dev/null 2>&1; then
             echo "✅ WordPress capability checks detected - good security practice"
           else
             echo "ℹ️ Info: Consider adding user capability checks where appropriate"
@@ -528,6 +529,58 @@ jobs:
           filename: .github/ISSUE_TEMPLATE/security-failure.md
           update_existing: false
 
+  phpstan-wordpress:
+    name: PHPStan for WordPress (PHP 8.3)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+        with:
+          # Always fetch the latest commit, disable any caching
+          fetch-depth: 0
+          clean: true
+
+      - name: Setup PHP 8.3
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.3'
+          extensions: mysqli, curl, zip, intl, gd, mbstring, fileinfo, xml
+          coverage: none
+          tools: composer:v2
+
+      - name: Clear any existing composer cache
+        run: |
+          composer clear-cache || true
+          rm -rf vendor/ composer.lock || true
+
+      - name: Install Composer dependencies (no cache)
+        run: |
+          composer install --prefer-dist --no-progress --no-cache
+          
+      - name: Verify phpstan.neon content
+        run: |
+          echo "=== Current phpstan.neon content ==="
+          cat phpstan.neon
+          echo "=== End phpstan.neon content ==="
+
+      - name: PHPStan for WordPress Analysis
+        run: |
+          echo "Running PHPStan analysis with WordPress stubs..."
+          vendor/bin/phpstan analyse --no-progress --error-format=table
+          echo "✅ PHPStan analysis completed successfully!"
+
+      - name: Create issue on PHPStan failure
+        if: ${{ failure() }}
+        uses: JasonEtco/create-an-issue@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PHP_VERSION: '8.3'
+          RUN_ID: ${{ github.run_id }}
+          WORKFLOW_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+        with:
+          filename: .github/ISSUE_TEMPLATE/phpstan-failure.md
+          update_existing: false
+
   wp-version-test:
     name: Test WordPress ${{ matrix.wp-version }} with PHP ${{ matrix.php-version }}
     runs-on: ubuntu-latest
@@ -812,56 +865,4 @@ jobs:
           WORKFLOW_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
         with:
           filename: .github/ISSUE_TEMPLATE/wp-version-test-failure.md
-          update_existing: false
-
-  phpstan-wordpress:
-    name: PHPStan for WordPress (PHP 8.3)
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v5
-        with:
-          # Always fetch the latest commit, disable any caching
-          fetch-depth: 0
-          clean: true
-
-      - name: Setup PHP 8.3
-        uses: shivammathur/setup-php@v2
-        with:
-          php-version: '8.3'
-          extensions: mysqli, curl, zip, intl, gd, mbstring, fileinfo, xml
-          coverage: none
-          tools: composer:v2
-
-      - name: Clear any existing composer cache
-        run: |
-          composer clear-cache || true
-          rm -rf vendor/ composer.lock || true
-
-      - name: Install Composer dependencies (no cache)
-        run: |
-          composer install --prefer-dist --no-progress --no-cache
-          
-      - name: Verify phpstan.neon content
-        run: |
-          echo "=== Current phpstan.neon content ==="
-          cat phpstan.neon
-          echo "=== End phpstan.neon content ==="
-
-      - name: PHPStan for WordPress Analysis
-        run: |
-          echo "Running PHPStan analysis with WordPress stubs..."
-          vendor/bin/phpstan analyse --no-progress --error-format=table
-          echo "✅ PHPStan analysis completed successfully!"
-
-      - name: Create issue on PHPStan failure
-        if: ${{ failure() }}
-        uses: JasonEtco/create-an-issue@v2
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PHP_VERSION: '8.3'
-          RUN_ID: ${{ github.run_id }}
-          WORKFLOW_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
-        with:
-          filename: .github/ISSUE_TEMPLATE/phpstan-failure.md
           update_existing: false

phpstan.neon

@@ -7,6 +7,10 @@ parameters:
         - optimizations-ace-mc.php
         - class-optimizations-ace-mc.php
 
+    excludePaths:
+        - .github
+        - .vscode
+    
     bootstrapFiles:
         - vendor/php-stubs/wordpress-stubs/wordpress-stubs.php
         - optimizations-ace-mc.php