Upgrade versions of action, and cache dependencies

Author: sidra-asa

.github/workflows/codeql-analysis.yml

@@ -35,11 +35,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@v2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -50,7 +50,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      uses: github/codeql-action/autobuild@v2
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -64,4 +64,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@v2

.github/workflows/docker-image.yml

@@ -13,6 +13,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Build the Docker image
       run: docker build . --file Dockerfile --tag my-image-name:$(date +%s)

.github/workflows/docker-publish.yml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
       - name: Run tests
         run: |
@@ -45,7 +45,7 @@ jobs:
     if: github.event_name == 'push'
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
       - name: Build image
         run: docker build . --file Dockerfile --tag $IMAGE_NAME

.github/workflows/pytest.yml

@@ -15,20 +15,28 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.8
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.8
+        cache: 'pipenv'
+        cache-dependency-path: |
+          **/Pipfile.lock
+
+    - name: Install pipenv
+      run: |
+        python -m pip install --upgrade pipenv wheel
+
     - name: Install dependencies
       run: |
-        python -m pip install --upgrade pip
-        python -m pip install pytest rzpipe meson==0.62.0 ninja coverage ciphey frida objection
-        sudo apt-get install -y ninja-build
-        
+        pipenv install --dev --skip-lock
+        pip install meson==0.62.0 ninja
+        sudo apt-get install ninja-build
+
         # Install graphviz
         sudo apt-get -y install graphviz
-        
+
         # Install Rizin
         sudo git clone --branch v0.3.4 https://github.com/rizinorg/rizin /opt/rizin/
         cd /opt/rizin/
@@ -38,23 +46,14 @@ jobs:
         sudo ldconfig -v
         cd -
         
-        # Install click >= 8.0.0 for CLI supports
-        python -m pip install click==8.0.3
-
-    - name: Install Quark-Engine
-      run: |
-        python setup.py build
-        python setup.py install
-
     - name: Test with pytest
       run: |
-        python -m pip install black pytest sphinx sphinx-rtd-theme
-        python -m pip install coveralls codecov pytest-cov
-        pytest --cov=./
+        pipenv install pytest-cov ciphey frida --skip-lock
+        pipenv run pytest --cov=. --cov-report=xml
 
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@v1
+      uses: codecov/codecov-action@v3
       with:
         flags: unittests
         fail_ci_if_error: true
-          
+        verbose: true

.github/workflows/pythonpublish.yml

@@ -8,11 +8,14 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v3
     - name: Set up Python
-      uses: actions/setup-python@v1
+      uses: actions/setup-python@v4
       with:
         python-version: '3.x'
+        cache: 'pipenv'
+        cache-dependency-path: |
+          **/Pipfile.lock
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip

.github/workflows/smoke_test.yml

@@ -26,10 +26,10 @@ jobs:
         python-version: [3.8, 3.9]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
 
     - name: Set up Python
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: ${{ matrix.python-version }}
 
@@ -38,15 +38,14 @@ jobs:
         python -m pip install --upgrade pip
         python -m pip install ciphey frida objection
         python -m pip install black pytest sphinx sphinx-rtd-theme
-
         # Install click >= 8.0.0 for CLI supports
         python -m pip install click==8.0.3
 
-    - run: sudo apt-get -y install graphviz
+    - run: sudo apt-get -y install graphviz ninja-build
       if: matrix.os == 'ubuntu-latest'
-    - run: brew install graphviz
+    - run: brew install graphviz ninja
       if: matrix.os == 'macOS-latest'
-    - run: choco install graphviz
+    - run: choco install graphviz ninja
       if: matrix.os == 'windows-latest'
 
     - name: Install Quark-Engine
@@ -68,14 +67,12 @@ jobs:
         quark -a apk-malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk -s -g
         quark -a apk-malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk -d -g
         quark -a apk-malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk -s -c
-
     - name: Check Accuracy
       shell: bash
       run: |
         echo "Ahmyth_RESULT=$(quark -a apk-malware-samples/Ahmyth.apk -s -t 100 | grep 100% | wc -l | awk '{print $1}')" >> $GITHUB_ENV
         echo "a4db_RESULT=$(quark -a apk-malware-samples/13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk -s -t 100 | grep 100% | wc -l | awk '{print $1}')" >> $GITHUB_ENV
         echo "e273e_RESULT=$(quark -a apk-malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk -s -t 100 | grep 100% | wc -l | awk '{print $1}')" >> $GITHUB_ENV
-
     - name: Check Ahmyt Result
       shell: bash
       # This sample should have 16 behaviors with 100% confidence
@@ -85,7 +82,6 @@ jobs:
         else
           exit 1
         fi
-
     - name: Check 13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk Result
       shell: bash
       # This sample should have 11 behaviors with 100% confidence
@@ -95,7 +91,6 @@ jobs:
         else
           exit 1
         fi
-
     - name: Check 14d9f1a92dd984d6040cc41ed06e273e.apk Result
       shell: bash
       # This sample should have 15 behaviors with 100% confidence

Pipfile

@@ -8,6 +8,9 @@ black = "*"
 pytest = "*"
 sphinx = "*"
 sphinx-rtd-theme = "*"
+pytest-cov = "*"
+coveralls = "*"
+codecov = "*"
 
 [packages]
 prettytable = "<=2.4.0"