Jeremy Daer
586015c3f9
Gemfile.saas evals Gemfile, so shared gems should have identical versions in both lockfiles. This adds bin/bundle-drift to detect and fix drift: * `bin/bundle-drift check` compares shared gem versions * `bin/bundle-drift correct` seeds Gemfile.lock from Gemfile.saas.lock and re-locks, letting Bundler prune SaaS-only gems while preserving shared versions Adds drift check to bin/ci and GitHub CI. Corrects existing drift.
36 lines
1.3 KiB
Ruby
36 lines
1.3 KiB
Ruby
# Run using bin/ci
|
|
|
|
require_relative "../lib/fizzy"
|
|
|
|
OSS_ENV = "SAAS=false BUNDLE_GEMFILE=Gemfile"
|
|
SAAS_ENV = "SAAS=true BUNDLE_GEMFILE=Gemfile.saas"
|
|
SYSTEM_TEST_ENV = "PARALLEL_WORKERS=1" # system tests can't run reliably in parallel
|
|
|
|
CI.run do
|
|
step "Setup", "bin/setup --skip-server"
|
|
|
|
step "Style: Ruby", "bin/rubocop"
|
|
|
|
step "Gemfile: Drift check", "bin/bundle-drift check"
|
|
step "Security: Gem audit", "bin/bundler-audit check --update"
|
|
step "Security: Importmap audit", "bin/importmap audit"
|
|
step "Security: Brakeman audit", "bin/brakeman --quiet --no-pager --exit-on-warn --exit-on-error"
|
|
step "Security: Gitleaks audit", "bin/gitleaks-audit"
|
|
|
|
if Fizzy.saas?
|
|
step "Tests: SaaS", "#{SAAS_ENV} bin/rails test"
|
|
step "Tests: SaaS System", "#{SAAS_ENV} #{SYSTEM_TEST_ENV} bin/rails test:system"
|
|
step "Tests: OSS", "#{OSS_ENV} bin/rails test"
|
|
step "Tests: OSS System", "#{OSS_ENV} #{SYSTEM_TEST_ENV} bin/rails test:system"
|
|
else
|
|
step "Tests: SQLite", "#{OSS_ENV} bin/rails test"
|
|
step "Tests: SQLite System", "#{OSS_ENV} #{SYSTEM_TEST_ENV} bin/rails test:system"
|
|
end
|
|
|
|
if success?
|
|
step "Signoff: All systems go. Ready for merge and deploy.", "gh signoff"
|
|
else
|
|
failure "Signoff: CI failed. Do not merge or deploy.", "Fix the issues and try again."
|
|
end
|
|
end
|