Merge branch 'master' into dougqh/crash-tracking-in-smoke-tests

Author: dougqh

.github/workflows/README.md

@@ -20,6 +20,14 @@ _Action:_ Append the new release to the Cloud Foundry repository.
 
 _Recovery:_ Manually edit and push the `index.yml` file from [the cloudfoundry branch](https://github.com/DataDog/dd-trace-java/tree/cloudfoundry).
 
+### check-pull-requests [🔗](check-pull-requests.yaml)
+
+_Trigger:_ When creating or updating a pull request.
+
+_Action:_ Check the pull request complies with [the contribution guidelines](https://github.com/DataDog/dd-trace-java/blob/master/CONTRIBUTING.md).
+
+_Recovery:_ Manually verify the guideline compliance.
+
 ### create-next-milestone [🔗](create-next-milestone.yaml)
 
 _Trigger:_ When closing a milestone.

.github/workflows/analyze-changes.yaml

@@ -140,6 +140,9 @@ jobs:
           output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH'
           limit-severities-for-sarif: true
+        env:
+          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
+          TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6

.github/workflows/check-pull-requests.yaml

@@ -0,0 +1,53 @@
+name: Check pull requests
+on:
+  pull_request:
+    types: [opened, reopened, edited, labeled, unlabeled]
+    branches:
+    - master
+    - release/v*
+jobs:
+  check_pull_requests:
+    name: Check pull requests
+    permissions:
+      issues: write # Required to create a comment on the pull request
+      pull-requests: write # Required to create a comment on the pull request
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check pull requests
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # 7.0.1
+        with:
+          github-token: ${{secrets.GITHUB_TOKEN}}
+          script: |
+            // Skip draft pull requests
+            if (context.payload.pull_request.draft) {
+              return
+            }
+            // Check at least one type and (component or instrumentation) label is set
+            const labels = context.payload.pull_request.labels.map(label => label.name)
+            const ignoreReleaseNotes = labels.filter(label => label == 'tag: no release notes').length > 0
+            const hasTypeLabel = labels.filter(label => label.startsWith('type:')).length > 0
+            const hasComponentLabel = labels.filter(label => label.startsWith('comp:')).length > 0
+            const hasInstrumentationLabel = labels.filter(label => label.startsWith('instr:')).length > 0
+            const labelsCheckFailed = !ignoreReleaseNotes && (!hasTypeLabel || (!hasComponentLabel && !hasInstrumentationLabel));
+            if (labelsCheckFailed) {
+              core.setFailed('Please add at least one type, and one component or instrumentation label to the pull request.')
+            }
+            // Check title does not contain tag
+            const title = context.payload.pull_request.title
+            const titleCheckFailed = title.match(/\[.*\]/)
+            if (titleCheckFailed) {
+              core.setFailed('Please remove the tag from the pull request title.')
+            }
+            // Add comment to the pull request
+            if (labelsCheckFailed || titleCheckFailed) {
+              await github.rest.issues.createComment({
+                issue_number: context.payload.pull_request.number,
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                body: 'Hi! 👋 Thanks for your pull request! 🎉\n\n' +
+                  'To help us review it, please make sure to:\n\n' +
+                  (labelsCheckFailed ? '* Add at least one type, and one component or instrumentation label to the pull request\n' : '') +
+                  (titleCheckFailed ? '* Remove the tag from the pull request title\n' : '') +
+                  '\nIf you need help, please check our [contributing guidelines](https://github.com/DataDog/dd-trace-java/blob/master/CONTRIBUTING.md).'
+              })
+            }

.github/workflows/tests/check-pull-requests/payload-pull-request-draft.json

@@ -0,0 +1,8 @@
+{
+    "pull_request": {
+        "number": 7884,
+        "draft": true,
+        "labels": [],
+        "title": "Adding some new features"
+    }
+}

.github/workflows/tests/check-pull-requests/payload-pull-request-missing-label.json

@@ -0,0 +1,12 @@
+{
+    "pull_request": {
+        "number": 7884,
+        "draft": false,
+        "labels": [
+            {
+                "name": "comp: api"
+            }
+        ],
+        "title": "Adding some new features"
+    }
+}

.github/workflows/tests/check-pull-requests/payload-pull-request-no-release-notes.json

@@ -0,0 +1,12 @@
+{
+    "pull_request": {
+        "number": 7884,
+        "draft": false,
+        "labels": [
+            {
+                "name": "tag: no release notes"
+            }
+        ],
+        "title": "Adding some new features"
+    }
+}

.github/workflows/tests/check-pull-requests/payload-pull-request-title-tag.json

@@ -0,0 +1,15 @@
+{
+    "pull_request": {
+        "number": 7884,
+        "draft": false,
+        "labels": [
+            {
+                "name": "comp: api"
+            },
+            {
+                "name": "type: enhancement"
+            }
+        ],
+        "title": "[API] Adding some new features"
+    }
+}

.github/workflows/tests/check-pull-requests/payload-pull-request.json

@@ -0,0 +1,15 @@
+{
+    "pull_request": {
+        "number": 7884,
+        "draft": false,
+        "labels": [
+            {
+                "name": "comp: api"
+            },
+            {
+                "name": "type: enhancement"
+            }
+        ],
+        "title": "Adding some new features"
+    }
+}

.github/workflows/tests/check-pull-requests/test-pull-request.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+source "$(dirname "$0")/../env.sh"
+testworkflow pull_request && \
+testworkflow pull_request draft && \
+testworkflow pull_request no-release-notes && \
+! testworkflow pull_request missing-label && \
+! testworkflow pull_request title-tag

.github/workflows/tests/env.sh

@@ -2,17 +2,23 @@
 
 function testworkflow() {
     local EVENT_TYPE=$1
+    local SCENARIO=$2
     # Get workflow name
     local TEST_PATH
     TEST_PATH=$(dirname "$(readlink -f "${BASH_SOURCE[1]}")")
     local WORKFLOW_NAME
     WORKFLOW_NAME=$(basename "$TEST_PATH")
     local WORKFLOW_FILE=.github/workflows/${WORKFLOW_NAME}.yaml
-    local PAYLOAD_FILE=${TEST_PATH}/payload-${EVENT_TYPE//_/-}.json
+    local PAYLOAD_FILE
+    PAYLOAD_FILE=${TEST_PATH}/payload-${EVENT_TYPE//_/-}
+    if [ "$SCENARIO" != "" ]; then
+        PAYLOAD_FILE=${PAYLOAD_FILE}-${SCENARIO}
+    fi
+    PAYLOAD_FILE=${PAYLOAD_FILE}.json
     # Move to project root directory
     local FILE_PATH
     FILE_PATH=$(dirname "$0")
-    cd "$FILE_PATH/../../../../" || exit 1
+    pushd "$FILE_PATH/../../../../" || exit 1
     # Check if workflow file and payload file exist
     if [ ! -f "$WORKFLOW_FILE" ]; then
         echo "Workflow file not found: $WORKFLOW_FILE"
@@ -29,4 +35,10 @@ function testworkflow() {
         --container-architecture linux/amd64 \
         --secret GITHUB_TOKEN="$(gh auth token)" \
         --verbose
+    # Capture the exit code
+    local EXIT_CODE=$?
+    # Move back to initial directory
+    popd || exit 1
+    # Return the test exit code
+    return $EXIT_CODE
 }