Feature: GitHub actions

[Sophist-UK]

Make cognitive-code-analysis work as a Github action for commits and PRs (.

So rather than feed in previous metrics as a JSON file, get it to make a before and after comparison based on the before and after commit points.

A integrate it into GitHub so that the analysis and recommendations are integrated into the commit/pr as review comments.

[floriankraemer]

Thank you for sharing this idea! I'll keep this for the time being but I think this is out of scope. If anyone wants to create a GH action, please contribute. :)

[Sophist-UK]

TBH I would personally consider this to be the primary use case and a manual run with a report being (maybe) the third priority use case after editor integration.

[floriankraemer]

By the way, you can already generate a baseline and when you make changes, it will show the delta, at least in the console output for now. It should be easy to add it to the exporters.

[floriankraemer]

So rather than feed in previous metrics as a JSON file, get it to make a before and after comparison based on the before and after commit points.

If you don't save a baseline file, then you'll have to checkout the previous commit, run it, somehow save the result anyway and then run it again for the last commit.

A GH action will not be part of this repository and I won't make this a priority for the time being. It should not be hard to tell any state of the art AI to generate you a GH workflow that will generate the report based on the baseline, that will make the report include the delta and then upload it to a storage, into a DB or block the pull request.

[floriankraemer]

For Gitlab this can be used with the latest master. I'll do a release within the next few days.

Code-Metrics:
  interruptible: true
  extends: .setup_composer_install
  image: registry.gitlab.com/clipmyhorsetv/infrastructure/php_docker_images:8.4-nginx-php-dev
  stage: tests
  dependencies:
    - PHP-Unit
  variables:
    GIT_DEPTH: 0
  before_script:
    - git config --global --add safe.directory $CI_PROJECT_DIR
    - git fetch origin $CI_MERGE_REQUEST_TARGET_BRANCH_NAME:$CI_MERGE_REQUEST_TARGET_BRANCH_NAME
  script:
    - composer install --prefer-dist --no-ansi --no-interaction --no-progress --no-scripts
    - |
      if [ "$CI_PIPELINE_SOURCE" = "merge_request_event" ] && [ -n "$CI_MERGE_REQUEST_DIFF_BASE_SHA" ]; then
        CHANGED_FILES=$(git diff --name-only --diff-filter=ACMR $CI_MERGE_REQUEST_DIFF_BASE_SHA...$CI_COMMIT_SHA | grep '\.php$' | tr '\n' ' ')
      else
        CHANGED_FILES=$(find src/ -name "*.php" | tr '\n' ' ')
      fi
      if [ -n "$CHANGED_FILES" ]; then
        bin/phpcca analyse $CHANGED_FILES --report-type=markdown --report-file=cca-report.md --config=phpcca.yml
        if [ -f "cca-report.md" ] && [ -s "cca-report.md" ]; then
          # Try with CI_JOB_TOKEN first, fallback to CI/CD variables
          if [ -n "$VALIDATOR" ]; then
            TOKEN="$VALIDATOR"
          else
            TOKEN="$CI_JOB_TOKEN"
          fi

          echo "Posting comment to merge request $CI_MERGE_REQUEST_IID..."
          echo "Report content preview:"
          head -5 cca-report.md

          # Use POST with body as query parameter as per GitLab API documentation
          RESPONSE=$(curl -s -w "\n%{http_code}" --request POST --header "PRIVATE-TOKEN: $TOKEN" \
               --data-urlencode "body=$(cat cca-report.md)" \
               "https://gitlab.com/api/v4/projects/$CI_PROJECT_ID/merge_requests/$CI_MERGE_REQUEST_IID/notes")

          HTTP_CODE=$(echo "$RESPONSE" | tail -1)
          RESPONSE_BODY=$(echo "$RESPONSE" | head -n -1)

          echo "HTTP Response Code: $HTTP_CODE"
          echo "Response Body: $RESPONSE_BODY"

          if [ "$HTTP_CODE" = "201" ]; then
            echo "Comment posted successfully"
          else
            echo "Failed to post comment. HTTP Code: $HTTP_CODE"
          fi
        fi
      else
        echo "No PHP files changed, skipping analysis"
        echo "[]" > cca-report.md
      fi
  rules:
    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
      changes:
        compare_to: "refs/heads/$CI_DEFAULT_BRANCH"
        paths:
          - '**/*.php'
    - when: never
  artifacts:
    when: always
    paths:
      - cca-report.md

[floriankraemer]

Here is the code for a Github Action. Add the --config=config.yml as needed for a different config.

name: Code Metrics

on:
  pull_request:
    paths:
      - '**/*.php'
    branches:
      - '*'

permissions:
  pull-requests: write
  contents: read

jobs:
  code-metrics:
    name: Cognitive Code Analysis
    runs-on: ubuntu-24.04
    if: github.event_name == 'pull_request'

    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Fetch base branch
        run: |
          git fetch origin ${{ github.base_ref }}:${{ github.base_ref }}

      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: '8.4'
          extensions: json, fileinfo
          tools: composer

      - name: Install dependencies
        run: composer install --prefer-dist --no-ansi --no-interaction --no-progress --no-scripts

      - name: Analyze changed PHP files
        id: analyze
        run: |
          BASE_SHA="${{ github.event.pull_request.base.sha }}"
          HEAD_SHA="${{ github.sha }}"

          CHANGED_FILES=$(git diff --name-only --diff-filter=ACMR $BASE_SHA...$HEAD_SHA | grep '\.php$' | tr '\n' ' ' || echo "")

          if [ -n "$CHANGED_FILES" ]; then
            echo "Analyzing files: $CHANGED_FILES"
            bin/phpcca analyse $CHANGED_FILES --report-type=markdown --report-file=cca-report.md || true

            if [ -f "cca-report.md" ] && [ -s "cca-report.md" ]; then
              echo "has_report=true" >> $GITHUB_OUTPUT
              echo "Report generated successfully"
            else
              echo "has_report=false" >> $GITHUB_OUTPUT
              echo "No report generated"
            fi
          else
            echo "has_report=false" >> $GITHUB_OUTPUT
            echo "No PHP files changed, skipping analysis"
          fi

      - name: Post comment to PR
        if: steps.analyze.outputs.has_report == 'true'
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const report = fs.readFileSync('cca-report.md', 'utf8');

            await github.rest.issues.createComment({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: context.issue.number,
              body: report
            });

      - name: Upload report artifact
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: cca-report
          path: cca-report.md
          if-no-files-found: ignore