binary-static-analysis.yml

# Binary static analysis of subzero CORE, to make sure it's built properly
name: "Binary Static Analysis"

on:
  push:
    branches: [master]
  pull_request:
    # The branches below must be a subset of the branches above
    branches: [master]
  schedule:
    # Daily at 2:42am
    - cron: '42 3 * * *'

jobs:
  bincheck:
    name: "Binary Static Analysis"
    runs-on: ubuntu-latest
    defaults:
      run:
        shell: bash -euxo pipefail {0}

    strategy:
      fail-fast: false

    steps:
    - name: Checkout repository
      uses: actions/checkout@v2
      with:
        # We must fetch at least the immediate parents so that if this is
        # a pull request then we can checkout the head.
        fetch-depth: 2
        submodules: 'recursive'

    - name: Init Hermit
      uses: cashapp/activate-hermit@v1

    - name: Install Clang
      run: |
        sudo apt-get update
        sudo apt install clang -y

    - name: Install python packages
      run: |
        cd ${{ github.workspace }}
        pip install --upgrade pip
        pip install -r ./core/requirements.txt

    - name: Build subzero CORE
      run: |
        cd ${{ github.workspace }}
        export CC=`which clang`
        export CXX=`which clang++`
        scripts/build_core.sh

    # Run binary static analysis
    - name: Run binary static analysis
      run: |
        scripts/bsa_check_core.sh core/build