feat: added Github CI workflow

.github/nginx.conf → .github/nginx/nginx.conf

@@ -53,7 +53,7 @@ http {
         server_name     modsectest1;
 
         modsecurity on;
-        modsecurity_rules_file /home/runner/work/ModSecurity-nginx/ModSecurity-nginx/ModSecurity-nginx/.github/modsecurity.conf;
+        modsecurity_rules_file /home/runner/work/ModSecurity-nginx/ModSecurity-nginx/ModSecurity-nginx/.github/nginx/modsecurity.conf;
         root  /usr/local/nginx/html/;
 
         location / {
@@ -66,7 +66,7 @@ http {
         server_name     modsectest2;
 
         modsecurity on;
-        modsecurity_rules_file /home/runner/work/ModSecurity-nginx/ModSecurity-nginx/ModSecurity-nginx/.github/modsecurity.conf;
+        modsecurity_rules_file /home/runner/work/ModSecurity-nginx/ModSecurity-nginx/ModSecurity-nginx/.github/nginx/modsecurity.conf;
         root /usr/local/nginx/html/;
 
         location / {

.github/workflows/ci.yml → .github/workflows/test.yml

@@ -18,25 +18,27 @@ jobs:
           sudo apt-get update -y -qq
           sudo apt-get install -y gcc g++ make autoconf automake make libyajl-dev libxml2-dev libmaxminddb-dev libpcre2-dev libpcre2-8-0 libpcre2-16-0 libpcre2-32-0 libcurl4-gnutls-dev jq wget
       - name: Install ModSecurity library
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          modsec=`curl -s https://api.github.com/repos/owasp-modsecurity/ModSecurity/releases/latest | jq .assets[0].browser_download_url | tr -d "\""`
-          modsecver=`curl -s https://api.github.com/repos/owasp-modsecurity/ModSecurity/releases/latest | jq .name | tr -d "\""`
-          wget $modsec -O modsecurity.tar.gz
-          tar -xzf modsecurity.tar.gz
+          modsecver=`gh release view -R owasp-modsecurity/ModSecurity -q .tagName --json tagName`
+          gh release download -p "*.tar.gz" -R owasp-modsecurity/ModSecurity $modsecver -O - | tar -xzf -
           cd modsecurity-$modsecver
           ./configure --disable-lmdb --prefix=/usr
-          make -j `nproc`
+          make -j $(nproc)
           sudo make install
           cd
       - uses: actions/checkout@v2
         with:
           path: ModSecurity-nginx
+          fetch-depth: 1
       - name: Get Nginx source
         uses: actions/checkout@v3
         with:
           repository: nginx/nginx
           path: nginx
-      - name: Build nginx
+          fetch-depth: 1
+      - name: Build nginx with ModSecurity-nginx module
         working-directory: nginx
         run: |
           ./auto/configure --with-ld-opt="-Wl,-rpath,/usr/local/lib" --without-pcre2 --add-module=/home/runner/work/ModSecurity-nginx/ModSecurity-nginx/ModSecurity-nginx
@@ -45,21 +47,41 @@ jobs:
           sudo make install
       - name: Start Nginx
         run: |
-          sudo /usr/local/nginx/sbin/nginx -c /home/runner/work/ModSecurity-nginx/ModSecurity-nginx/ModSecurity-nginx/.github/nginx.conf
+          sudo /usr/local/nginx/sbin/nginx -c /home/runner/work/ModSecurity-nginx/ModSecurity-nginx/ModSecurity-nginx/.github/nginx/nginx.conf
       - name: Run attack test vhost 1
         run: |
-          resp=`curl -I -X GET -H "Host: modsectest1" http://localhost/?q=attack | head -1 | cut -d$' ' -f2`
-          if [ $resp == "403" ]; then echo "OK"; else echo "FAIL"; exit 1; fi
+          status=$(curl -sSo /dev/null -w %{http_code} -I -X GET -H "Host: modsectest1" "http://localhost/?q=attack")
+          if [ "${status}" == "403" ]; then
+            echo "OK"
+          else
+            echo "FAIL"
+            exit 1
+          fi
       - name: Run non-attack test vhost 1
         run: |
-          resp=`curl -I -X GET -H "Host: modsectest1" http://localhost/?q=1 | head -1 | cut -d$' ' -f2`
-          if [ $resp == "200" ]; then echo "OK"; else echo "FAIL"; exit 1; fi
+          status=$(curl -sSo /dev/null -w %{http_code} -I -X GET -H "Host: modsectest1" "http://localhost/?q=1")
+          if [ "${status}" == "200" ]; then
+            echo "OK"
+          else
+            echo "FAIL"
+            exit 1
+          fi
       - name: Run attack test vhost 2
         run: |
-          resp=`curl -I -X GET -H "Host: modsectest2" http://localhost/?q=attack | head -1 | cut -d$' ' -f2`
-          if [ $resp == "403" ]; then echo "OK"; else echo "FAIL"; exit 1; fi
+          status=$(curl -sSo /dev/null -w %{http_code} -I -X GET -H "Host: modsectest2" "http://localhost/?q=attack")
+          if [ "${status}" == "403" ]; then
+            echo "OK"
+          else
+            echo "FAIL"
+            exit 1
+          fi
       - name: Run non-attack test vhost 2
         run: |
-          resp=`curl -I -X GET -H "Host: modsectest2" http://localhost/?q=1 | head -1 | cut -d$' ' -f2`
-          if [ $resp == "200" ]; then echo "OK"; else echo "FAIL"; exit 1; fi
+          status=$(curl -sSo /dev/null -w %{http_code} -I -X GET -H "Host: modsectest2" "http://localhost/?q=1")
+          if [ "${status}" == "200" ]; then
+            echo "OK"
+          else
+            echo "FAIL"
+            exit 1
+          fi