main.yml

# This is a basic workflow to help you get started with Actions

name: CI

# Controls when the workflow will run
on:
  # Triggers the workflow on push or pull request events but only for the main branch
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:

  # This workflow contains a single job called "build"
  build:
    strategy:
      matrix:
        taintspew: [ 'false', 'true' ]
        jitspew:   [ 'false', 'true' ]

    name: 'SpiderMonkey (taintspew: ${{ matrix.taintspew }}, jitspew: ${{ matrix.jitspew }})'

    # The type of runner that the job will run on
    runs-on: ubuntu-latest

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:

      - name: Update
        run: |
          sudo apt-get update
          pip install junit-xml

      - name: Checkout release branch
        uses: actions/checkout@v3
        with:
          ref: firefox-release
          path: release

      # Bootstrap
      - name: Bootstrap Build Tools
        run: |
          cd release
          ./mach --no-interactive bootstrap --application-choice=js

      - name: Checkout release branch
        uses: actions/checkout@v3
        with:
            path: build
    
      # Configure
      - name: Copy configuration
        run: |
          cd build
          cp taintfox_mozconfig_spidermonkey .mozconfig

      - name: Enable JitSpew
        if: ${{ matrix.jitspew == 'true' }}
        run: echo "ac_add_options --enable-jitspew" >> .mozconfig

      - name: Enable TaintSpew
        if: ${{ matrix.taintspew == 'true' }}
        run: echo "ac_add_options --enable-taintspew" >> .mozconfig

      # Build
      - name: Build
        run: |
          cd build
          ./mach build

      # Test
      - name: Test
        run:  |
          cd build
          obj-spider-release/dist/bin/js js/src/Y.js

      - name: Taint Tests
        run:  |
          cd build
          python3 js/src/tests/parse_output.py

      - name: Upload Report
        uses: actions/upload-artifact@v4  # upload test results
        if:  ${{ matrix.taintspew == 'false' &&  matrix.jitspew == 'false' && (success() || failure()) }} # run this step even if previous step failed
        with:
          name: test-results
          path: build/jstest_output.xml