add: rule CI/CD workflow #13
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Rule Testing CI/CD | |
| on: | |
| pull_request: | |
| branches: [ "kunai-v*" ] | |
| env: | |
| CARGO_TERM_COLOR: always | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| # we try to find the appropriate kunai version we need to | |
| # clone for testing those rules | |
| - name: Define Variable | |
| run: | | |
| set -euxo pipefail | |
| TARGET_VERSION=$(echo ${{ github.event.pull_request.base.ref }} | sed 's/kunai-//') | |
| KUNAI_VERSION=$(git ls-remote --tags https://github.com/kunai-project/kunai.git | grep -P 'refs/tags/v\d+\.\d+\.\d+$' | awk '{print$NF}' | awk -F'/' '{print$NF}' | grep $TARGET_VERSION | sort -V | tail -1) | |
| echo "kunai-version=$KUNAI_VERSION" >> $GITHUB_ENV | |
| - name: Cache | |
| id: cache-kunai | |
| uses: actions/[email protected] | |
| with: | |
| # A list of files, directories, and wildcard patterns to cache and restore | |
| path: | | |
| ~/.cargo | |
| ~/.rustup | |
| ./kunai/ | |
| # An explicit key for restoring and saving the cache | |
| key: cache-kunai-${{ env.kunai-version }} | |
| # we are checking out the good kunai version to test those rules | |
| - name: Checkout Kunai | |
| # run the stuff only if we failed at retrieve from cache | |
| if: steps.cache-kunai.outputs.cache-hit != 'true' | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: kunai-project/kunai | |
| ref: ${{ env.kunai-version }} | |
| path: kunai | |
| # we install tools to compile kunai | |
| - name: Install system tools | |
| # no need to run if already compiled | |
| if: steps.cache-kunai.outputs.cache-hit != 'true' | |
| run: | | |
| sudo apt update | |
| sudo apt install -y qemu-system-x86 clang lld libbpf-dev | |
| # we install bpf-linker if needed | |
| - name: Install bpf-linker | |
| if: steps.cache-kunai.outputs.cache-hit != 'true' | |
| run: cargo install bpf-linker | |
| - name: Build Kunai | |
| if: steps.cache-kunai.outputs.cache-hit != 'true' | |
| working-directory: kunai | |
| run: cargo xbuild --release | |
| - name: Checkout Rules | |
| uses: actions/checkout@v3 | |
| with: | |
| path: kunai/rules | |
| # we are running tests on rules | |
| - name: Running Rule Tests | |
| working-directory: kunai | |
| run: ./target/x86_64-unknown-linux-gnu/release/kunai -v test -r ./rules -t ./rules/tests/detections -b ./rules/tests/baselines | |