fix tests and add test cases with no available contexts are allowed

Author: rhysd

expr_sema_test.go

@@ -754,6 +754,7 @@ func TestExprSemanticsCheckOK(t *testing.T) {
 			}
 
 			c := NewExprSemanticsChecker(false, nil)
+			c.SetContextAvailability([]string{"github", "job", "jobs", "matrix", "steps", "needs", "env", "inputs", "secrets", "vars", "runner"})
 			if tc.funcs != nil {
 				c.funcs = tc.funcs
 			}
@@ -1210,6 +1211,14 @@ func TestExprSemanticsCheckError(t *testing.T) {
 			},
 			availCtx: []string{"env", "matrix"},
 		},
+		{
+			what:  "no available context",
+			input: "github",
+			expected: []string{
+				"context \"github\" is not allowed here. no context is available",
+			},
+			availCtx: []string{},
+		},
 		{
 			what:  "no special function allowed",
 			input: "success()",
@@ -1301,6 +1310,8 @@ func TestExprSemanticsCheckError(t *testing.T) {
 			}
 			if tc.availCtx != nil {
 				c.SetContextAvailability(tc.availCtx)
+			} else {
+				c.SetContextAvailability([]string{"github", "job", "jobs", "matrix", "steps", "needs", "env", "inputs", "secrets", "vars", "runner"})
 			}
 			if tc.availSP != nil {
 				c.SetSpecialFunctionAvailability(tc.availSP)
@@ -1496,6 +1507,16 @@ func TestExprCompareOperandsCheck(t *testing.T) {
 						},
 						"any": AnyType{},
 					}
+					c.SetContextAvailability([]string{
+						"any",
+						"number",
+						"string",
+						"bool",
+						"null",
+						"object",
+						"array",
+						"array_2d",
+					})
 
 					ty, errs := c.Check(e)
 					if ok {

testdata/err/context_availability.out

@@ -1,4 +1,4 @@
-/test\.yaml:3:34: context "env" is not allowed here\. .+ \[expression\]/
+/test\.yaml:3:35: context "env" is not allowed here\. .+ \[expression\]/
 /test\.yaml:10:12: context "env" is not allowed here\. .+ \[expression\]/
 /test\.yaml:15:32: context "env" is not allowed here\. .+ \[expression\]/
 /test\.yaml:25:22: context "env" is not allowed here\. .+ \[expression\]/
@@ -17,6 +17,7 @@
 /test\.yaml:106:18: context "runner" is not allowed here\. .+ \[expression\]/
 /test\.yaml:111:20: context "env" is not allowed here\. .+ \[expression\]/
 /test\.yaml:115:25: context "runner" is not allowed here\. .+ \[expression\]/
+/test\.yaml:121:23: context "runner" is not allowed here\. .+ \[expression\]/
 /test\.yaml:127:17: context "env" is not allowed here\. .+ \[expression\]/
 /test\.yaml:134:23: context "env" is not allowed here\. .+ \[expression\]/
 /test\.yaml:139:23: context "env" is not allowed here\. .+ \[expression\]/
@@ -31,3 +32,4 @@
 /test\.yaml:208:19: context "runner" is not allowed here\. .+ \[expression\]/
 /test\.yaml:210:18: context "runner" is not allowed here\. .+ \[expression\]/
 /test\.yaml:217:34: context "env" is not allowed here\. .+ \[expression\]/
+/test\.yaml:221:17: context "inputs" is not allowed here\. no context is available here\. .+ \[expression\]/

testdata/err/context_availability.yaml

@@ -1,6 +1,6 @@
 # run-name
 # ERROR at env
-run-name: ${{ github.actor}} ${{ env.GITHUB_ACTOR }}
+run-name: ${{ github.actor }} ${{ env.GITHUB_ACTOR }}
 
 # env
 env:
@@ -117,7 +117,7 @@ jobs:
           password: ${{ env.MY_PASSWORD }}
         # jobs.<job_id>.services.<service_id>.env.<env_id>
         env:
-          # OK
+          # ERROR
           RUNNER: ${{ runner.name }}
     # jobs.<job_id>.strategy
     strategy:
@@ -217,3 +217,5 @@ jobs:
     services: ${{ inputs.bool || env.FOO }}
     steps:
       - run: echo
+        # ERROR at env because `id` allow no context
+        id: ${{ inputs.foo }}

testdata/err/env_context_banned.yaml

@@ -21,7 +21,7 @@ jobs:
       - uses: test/my-action@main
         env:
           OS: ${{ runner.os }}
-        id: foo-${{ runner.name }}
+          NAME: ${{ runner.name }}
   container-job:
     runs-on: ubuntu-latest
     container:

testdata/err/reusable_workflow_empty_secrets.out

@@ -1 +1 @@
-/test\.yaml:12:24: property "calling_workflow_secret" is not defined in object type {.+} \[expression\]/
+/test\.yaml:12:23: property "calling_workflow_secret" is not defined in object type {.+} \[expression\]/

testdata/err/reusable_workflow_empty_secrets.yaml

@@ -9,4 +9,4 @@ jobs:
     steps:
       - name: Use a repo or org secret from the calling workflow.
         # So referring this secret causes an error
-        uses: echo ${{ secrets.CALLING_WORKFLOW_SECRET }}
+        run: echo ${{ secrets.CALLING_WORKFLOW_SECRET }}

testdata/ok/dynamic_shell_name.yaml

@@ -2,14 +2,14 @@ on: push
 
 defaults:
   run:
-    shell: ${{ env.SHELL }}
+    shell: ${{ 'sh {0}' }}
 
 jobs:
   test:
     runs-on: ubuntu-latest
     defaults:
       run:
-        shell: ${{ env.SHELL }}
+        shell: ${{ 'sh {0}' }}
     steps:
       - run: echo hi
-        shell: ${{ env.SHELL }}
+        shell: ${{ 'sh {0}' }}

testdata/ok/issue-101.yaml

@@ -4,4 +4,4 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: echo ${{ runner.arch }}
+      - run: echo ${{ runner.arch }}

testdata/ok/reusable_workflow_inherit_secrets.yaml

@@ -7,4 +7,4 @@ jobs:
     steps:
       # The CALLING_WORKFLOW_SECRET secret is passed with `secrets: inherit`
       - name: Use a repo or org secret from the calling workflow.
-        uses: echo ${{ secrets.CALLING_WORKFLOW_SECRET }}
+        run: echo ${{ secrets.CALLING_WORKFLOW_SECRET }}

testdata/ok/workflow_call_job.yaml

@@ -27,4 +27,4 @@ jobs:
     permissions: read-all
   call6:
     # Edge case. Give up checking format.
-    uses: ${{ runner.name }}
+    uses: ${{ 'oooops' }}