main.yml

name: CI

on: [push, pull_request]

jobs:
  tests:
    runs-on: ubuntu-latest

    services:
      sftp:
        image: atmoz/sftp
        ports:
          - 2222:22
        env:
          # user:password:uid:gid:writable directory inside the chroot
          SFTP_USERS: user:password:::upload

    strategy:
      # run all phpseclib/PHP combinations even if one of them fails
      fail-fast: false
      matrix:
        php: [8.0, 8.1]
        phpseclib: ['^2.0.35', '^3.0.57', '^4.0.2']
        exclude:
          - php: 8.0
            phpseclib: '^4.0.2'
        include:
          # phpseclib v2 has open security advisories, which Composer blocks by default
          - phpseclib: '^2.0.35'
            advisories-block: '0'

    steps:
    - name: Checkout code
      uses: actions/checkout@v2

    - name: Setup PHP
      uses: shivammathur/setup-php@v2
      with:
        php-version: ${{ matrix.php }}
        coverage: none

    - name: Validate composer.json and composer.lock
      run: composer validate

    - name: Install dependencies
      env:
        COMPOSER_POLICY_ADVISORIES_BLOCK: ${{ matrix.advisories-block || '1' }}
      run: |
        composer require phpseclib/phpseclib:"${{ matrix.phpseclib }}" --no-update
        composer update --prefer-dist --no-progress --no-interaction

    - name: Wait for SFTP server
      run: |
        for i in $(seq 30); do
          ssh-keyscan -p 2222 127.0.0.1 > /dev/null 2>&1 && exit 0
          sleep 1
        done
        echo "SFTP server did not start" >&2
        exit 1

    - name: Run test suite
      env:
        SFTP_HOST: 127.0.0.1
        SFTP_PORT: 2222
        SFTP_USER: user
        SFTP_PASSWORD: password
        SFTP_ROOT: /upload
      run: php vendor/bin/codecept run