solx/.github/workflows/sanitizer.yaml at 093465d23f619635abf610a441dbafb7d59d397c · NomicFoundation/solx · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
name: Sanitizer

on:
  pull_request:
    types: [opened, synchronize, reopened, labeled]

permissions:
  contents: read
  checks: write
  packages: read

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:

  label-check:
    if: >-
      (github.event.action == 'labeled' && github.event.label.name == 'ci:sanitizer'
      || github.event.action != 'labeled' && contains(github.event.pull_request.labels.*.name, 'ci:sanitizer'))
      && !github.event.pull_request.head.repo.fork
    runs-on: ubuntu-24.04
    steps:
      - run: 'true'

  cooldown-check:
    name: Cargo cooldown check
    runs-on: ubuntu-24.04
    needs: label-check
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      - uses: ./.github/actions/cooldown-check

  sanitizer:
    needs: [label-check, cooldown-check]
    runs-on: solx-linux-amd64
    container:
      image: ghcr.io/nomicfoundation/solx-ci-runner@sha256:c0866d146261cd0a51dc7d9077444b8ac3dde12c53d2151137834e6be149dbc7
      options: -m 110g
    env:
      TARGET: x86_64-unknown-linux-gnu
      RUST_SANITIZER: 'address'
      LLVM_SANITIZER: 'Address'
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          submodules: true

      - name: Checkout submodules
        run: |
          git config --global --add safe.directory '*'
          git submodule update --force --depth=1 --recursive --checkout

      - name: Build LLVM
        uses: ./.github/actions/build-llvm
        with:
          build-type: RelWithDebInfo
          sanitizer: ${{ env.LLVM_SANITIZER }}
          enable-assertions: 'true'

      - name: Building solc
        uses: ./.github/actions/build-solc
        with:
          cmake-build-type: RelWithDebInfo
          working-dir: 'solx-solidity'

      - name: Run tests
        uses: ./.github/actions/rust-unit-tests
        env:
          BOOST_PREFIX: ${{ github.workspace }}/solx-solidity/boost/lib
          SOLC_PREFIX: ${{ github.workspace }}/solx-solidity/build
        with:
          target: ${{ env.TARGET }}
          sanitizer: ${{ env.RUST_SANITIZER }}

  pr-checks:
    name: PR Checks (Sanitizer)
    runs-on: ubuntu-24.04
    if: always()
    needs:
      - label-check
      - cooldown-check
      - sanitizer
    steps:
      - name: Decide on PR checks
        uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # release/v1
        with:
          jobs: ${{ toJSON(needs) }}
          allowed-skips: >-
            ${{ needs.label-check.result == 'skipped' && 'label-check, cooldown-check, sanitizer' || '' }}