name: Static code analysis

on: [pull_request]

jobs:
    static-code-analysis:
        runs-on: ubuntu-latest
        steps:
            - uses: actions/checkout@v2
            - name: Checkout submodules
              shell: bash
              run: |
                auth_header="$(git config --local --get http.https://github.com/.extraheader)"
                git submodule sync --recursive
                git -c "http.extraheader=$auth_header" -c protocol.version=2 submodule update --init --force --recursive --depth=1
            - name: Remove composer.json
              shell: bash
              run: rm composer.json composer.lock
            - name: Psalm
              uses: docker://jakzal/phpqa:php7.4-alpine
              with:
                args: psalm --monochrome --no-progress --output-format=text --update-baseline || ( git diff && exit 1 )
            - name: Check for changes in Psalm baseline
              run: |
                bash -c "[[ ! \"`git status --porcelain build/psalm-baseline.xml`\" ]] || ( echo 'Uncommited changes in Psalm baseline' && git status && git diff build/psalm-baseline.xml && exit 1 )"