ci_new.yml

name: Quality Assurance new

on:
  push:
  pull_request:

env:
  LUA_VERSION: "5.4"

jobs:
  build-linux:
    name: Linux (${{ matrix.platform.label }}, ${{ matrix.compiler.label }}, ${{ matrix.configure.label }})

    # Ubuntu 24.04 does not provide native 32-bit (i386) installation images.
    # Only amd64 (x86_64) is officially supported. 32-bit has been removed from this matrix.
    runs-on: ubuntu-24.04

    strategy:
      fail-fast: false
      matrix:
        platform:
          - { label: "x64", arch: "amd64", configure: "" }

        compiler:
          - { label: "gcc",   cc: "gcc",   cxx: "g++" }
          - { label: "clang", cc: "clang", cxx: "clang++" }

        configure:
          - { label: "with parser generation", opt: "--enable-parser-generation" }
          - { label: "without curl",    opt: "--without-curl" }
          - { label: "without lua",     opt: "--without-lua" }
          - { label: "without maxmind", opt: "--without-maxmind" }
          - { label: "without libxml",  opt: "--without-libxml" }
          - { label: "without geoip",   opt: "--without-geoip" }
          - { label: "without ssdeep",  opt: "--without-ssdeep" }
          - { label: "with lmdb",       opt: "--with-lmdb" }
          - { label: "with pcre2 (default)", opt: "" }
          - { label: "with pcre",        opt: "--with-pcre" }

    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
          submodules: recursive

      - name: Install dependencies
        run: |
          sudo apt-get update -y -qq
          sudo apt-get install -y \
            libyajl-dev \
            libcurl4-openssl-dev \
            liblmdb-dev \
            liblua${{ env.LUA_VERSION }}-dev \
            libmaxminddb-dev \
            libpcre2-dev \
            libxml2-dev \
            libfuzzy-dev \
            pcre2-utils \
            libpcre3-dev \
            bison \
            flex \
            pkg-config


      - name: Run build preparation script
        run: ./build.sh

      - name: Configure
        env:
          CC: ${{ matrix.compiler.cc }}
          CXX: ${{ matrix.compiler.cxx }}
        run: ./configure ${{ matrix.platform.configure }} ${{ matrix.configure.opt }} --enable-assertions=yes

      - uses: ammaraskar/gcc-problem-matcher@master

      - name: Compile
        run: make -j "$(nproc)"

      - name: Run tests
        run: make check

  build-macos:
    name: macOS (${{ matrix.configure.label }})
    runs-on: macos-15

    strategy:
      fail-fast: false
      matrix:
        configure:
          - { label: "with parser generation", opt: "--enable-parser-generation" }
          - { label: "without curl",    opt: "--without-curl" }
          - { label: "without lua",     opt: "--without-lua" }
          - { label: "without maxmind", opt: "--without-maxmind" }
          - { label: "without libxml",  opt: "--without-libxml" }
          - { label: "without geoip",   opt: "--without-geoip" }
          - { label: "without ssdeep",  opt: "--without-ssdeep" }
          - { label: "with lmdb",       opt: "--with-lmdb" }
          - { label: "with pcre2 (default)", opt: "" }
          - { label: "with pcre",       opt: "--with-pcre" }

    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
          submodules: recursive

      - name: Install dependencies
        # curl and pcre2 are typically already available in the macOS runner image
        run: |
          brew install autoconf \
                       automake \
                       libtool \
                       yajl \
                       lmdb \
                       lua@${{ env.LUA_VERSION }} \
                       libmaxminddb \
                       libxml2 \
                       ssdeep \
                       pcre \
                       bison \
                       flex
          echo "/usr/local/opt/lua@${{ env.LUA_VERSION }}/bin" >> $GITHUB_PATH
      - name: Run build preparation script
        run: ./build.sh

      - name: Configure
        run: ./configure ${{ matrix.configure.opt }} --enable-assertions=yes

      - uses: ammaraskar/gcc-problem-matcher@master

      - name: Compile
        run: make -j "$(sysctl -n hw.logicalcpu)"

      - name: Run tests
        run: make check

  build-windows:
    name: Windows (${{ matrix.platform.label }}, ${{ matrix.configure.label }})
    runs-on: windows-2025

    strategy:
      fail-fast: false
      matrix:
        platform:
          - { label: "x64", arch: "x86_64" }
        configuration: [Release]
        configure:
          - { label: "full",             opt: "" }
          - { label: "without curl",     opt: "-DWITH_CURL=OFF" }
          - { label: "without lua",      opt: "-DWITH_LUA=OFF" }
          - { label: "without maxmind",  opt: "-DWITH_MAXMIND=OFF" }
          - { label: "without libxml",   opt: "-DWITH_LIBXML2=OFF" }
          - { label: "with lmdb",        opt: "-DWITH_LMDB=ON" }

    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
          submodules: recursive

      - name: Install Conan package manager
        run: |
          pip3 install conan --upgrade
          conan profile detect

      - uses: ammaraskar/msvc-problem-matcher@master

      - name: Build project
        shell: cmd
        run: vcbuild.bat ${{ matrix.configuration }} ${{ matrix.platform.arch }} NO_ASAN "${{ matrix.configure.opt }}"

      - name: Prepare test environment
        working-directory: build\win32\build\${{ matrix.configuration }}
        env:
          BASE_DIR: ..\..\..\..
        shell: cmd
        run: |
          copy unit_tests.exe %BASE_DIR%\test
          copy regression_tests.exe %BASE_DIR%\test
          copy libModSecurity.dll %BASE_DIR%\test
          copy %BASE_DIR%\unicode.mapping %BASE_DIR%\test
          md \tmp
          md \bin
          copy "C:\Program Files\Git\usr\bin\echo.exe" \bin
          copy "C:\Program Files\Git\usr\bin\echo.exe" \bin\echo

      - name: Disable unsupported tests on Windows
        working-directory: test\test-cases\regression
        shell: cmd
        run: |
          jq "map(if .title == \"Test match variable (1/n)\" then .enabled = 0 else . end)" issue-2423-msg-in-chain.json > tmp.json && move /Y tmp.json issue-2423-msg-in-chain.json
          jq "map(if .title == \"Test match variable (2/n)\" then .enabled = 0 else . end)" issue-2423-msg-in-chain.json > tmp.json && move /Y tmp.json issue-2423-msg-in-chain.json
          jq "map(if .title == \"Test match variable (3/n)\" then .enabled = 0 else . end)" issue-2423-msg-in-chain.json > tmp.json && move /Y tmp.json issue-2423-msg-in-chain.json
          jq "map(if .title == \"Variable offset - FILES_NAMES\" then .enabled = 0 else . end)" offset-variable.json > tmp.json && move /Y tmp.json offset-variable.json

      - name: Run tests
        working-directory: build\win32\build
        run: ctest -C ${{ matrix.configuration }} --output-on-failure

  cppcheck:
    name: Static analysis (cppcheck)
    runs-on: macos-15

    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
          submodules: recursive

      - name: Install cppcheck
        run: |
          brew install autoconf automake libtool cppcheck libmaxminddb yajl lua@${{ env.LUA_VERSION }} lmdb ssdeep
          echo "/usr/local/opt/lua@${{ env.LUA_VERSION }}/bin" >> $GITHUB_PATH

      - name: Configure project
        run: |
          ./build.sh
          ./configure

      - name: Run cppcheck
        run: make check-static

  cppcheck-linux:
    name: Static analysis (cppcheck, Linux, debian:sid)
    runs-on: ubuntu-latest
    container: debian:sid

    steps:
      - name: Install basic tools
        run: |
          apt-get update
          apt-get install -y git

      - name: Mark repo as safe for git
        run: git config --global --add safe.directory $GITHUB_WORKSPACE
        
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
          submodules: recursive


      - name: Install dependencies (v2 style)
        run: |
          apt-get update
          apt-get install -y \
            autoconf \
            automake \
            build-essential \
            libtool \
            pkg-config \
            cppcheck \
            libyajl-dev \
            libcurl4-openssl-dev \
            liblmdb-dev \
            liblua${{ env.LUA_VERSION }}-dev \
            libmaxminddb-dev \
            libpcre2-dev \
            libxml2-dev \
            libfuzzy-dev \
            pcre2-utils \
            bison \
            flex

      - name: Run build preparation script
        run: ./build.sh

      - name: Configure project
        run: ./configure

      - name: Run cppcheck
        run: make check-static