jooby/.github/workflows/reproducibility.yml at 233301d79bf9a14eafa1b6f8907fd65b84240f44 · jooby-project/jooby · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
name: Reproducible Build Check

on:
  schedule:
    - cron: '0 0 * * *'
  workflow_dispatch:

jobs:
  check:
    name: Verify Deterministic Build
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v5
        with:
          ref: main

      - name: Set up JDK 21
        uses: actions/setup-java@v5
        with:
          java-version: 21
          distribution: 'temurin'
          cache: maven

      - name: 📦 Install
        run: mvn clean install -pl "!tests" -DskipTests -B --no-transfer-progress

      - name: 🔍 Verify Reproducibility
        run: mvn clean verify artifact:compare -pl "!tests" -DskipTests -B --no-transfer-progress

      - name: 📊 Generate Visual Report
        if: always()
        run: |
          echo "## 🔍 Reproducible Build Report" >> $GITHUB_STEP_SUMMARY

          TOTAL_OK=0
          TOTAL_KO=0
          TOTAL_IGNORED=0
          ALL_KO_FILES=""

          # Find all generated comparison files
          COMPARE_FILES=$(find . -type f -name "*.buildcompare")

          if [ -n "$COMPARE_FILES" ]; then
            for COMPARE_FILE in $COMPARE_FILES; do
              # Extract the values, defaulting to 0 if not found
              OK=$(grep '^ok=' "$COMPARE_FILE" | cut -d'=' -f2 || echo "0")
              KO=$(grep '^ko=' "$COMPARE_FILE" | cut -d'=' -f2 || echo "0")
              IGNORED=$(grep '^ignored=' "$COMPARE_FILE" | cut -d'=' -f2 || echo "0")

              # Aggregate the counts
              TOTAL_OK=$((TOTAL_OK + ${OK:-0}))
              TOTAL_KO=$((TOTAL_KO + ${KO:-0}))
              TOTAL_IGNORED=$((TOTAL_IGNORED + ${IGNORED:-0}))

              # Aggregate failed files if any exist in this module
              if [ "${KO:-0}" -gt 0 ]; then
                 FILES=$(grep '^koFiles=' "$COMPARE_FILE" | cut -d'=' -f2 | tr -d '"')
                 ALL_KO_FILES="$ALL_KO_FILES $FILES"
              fi
            done

            # Draw a Markdown Table with aggregated results
            echo "| Result | Count |" >> $GITHUB_STEP_SUMMARY
            echo "|--------|-------|" >> $GITHUB_STEP_SUMMARY
            echo "| ✅ **OK** | **$TOTAL_OK** |" >> $GITHUB_STEP_SUMMARY
            echo "| ❌ **Failed (KO)** | **$TOTAL_KO** |" >> $GITHUB_STEP_SUMMARY
            echo "| ⚠️ **Ignored** | **$TOTAL_IGNORED** |" >> $GITHUB_STEP_SUMMARY
            echo "" >> $GITHUB_STEP_SUMMARY

            # Provide specific feedback
            if [ "$TOTAL_KO" -gt 0 ]; then
               echo "### 🚨 Reproducibility Drift Detected!" >> $GITHUB_STEP_SUMMARY
               echo "The following files differ from the reference build:" >> $GITHUB_STEP_SUMMARY
               echo "\`\`\`text" >> $GITHUB_STEP_SUMMARY
               # Print each file on a new line, cleaning up extra spaces
               echo "$ALL_KO_FILES" | tr ' ' '\n' | grep -v '^$' >> $GITHUB_STEP_SUMMARY
               echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
            else
               echo "### 🎉 100% Reproducible!" >> $GITHUB_STEP_SUMMARY
               echo "The build is perfectly deterministic across all modules." >> $GITHUB_STEP_SUMMARY
            fi
          else
            echo "⚠️ **Could not find any \`.buildcompare\` files.** The Maven plugin might have failed before generating the report." >> $GITHUB_STEP_SUMMARY
          fi