johnbillion/plugin-infrastructure

Reusable infrastructure relating to testing, building, and deploying my WordPress plugins

Maintainers

Details

github.com/johnbillion/plugin-infrastructure

Source

Issues

Fund package maintenance!
johnbillion

Installs: 40 383

Dependents: 5

Suggesters: 0

Security: 0

Stars: 24

Watchers: 4

Forks: 2

Open Issues: 6

Language:Shell

dev-trunk 2025-05-26 07:57 UTC

Requires

  • php: >=7.4

MIT 1c98c94044fc9a5c709770e7f8a228d30d016d90

This package is auto-updated.

Last update: 2025-05-26 08:03:11 UTC

README

Reusable infrastructure relating to testing, building, and deploying my WordPress plugins (see the "Used by" section below).

Provided without support, warranty, guarantee, backwards compatibility, fitness for purpose, resilience, safety, sanity, beauty, or support for any plugin that isn't one of mine.

Used by

Features

  • Acceptance testing
  • Integration testing
  • Coding standards testing
  • Static analysis
  • Workflow file linting
  • Deployment to wordpress.org
  • Build provenance attestation
  • SLSA v1.0 Build level 3 facilitation

Overview

Plugins that use this library all use a similar setup in their workflows:

Acceptance testing

  • Push to a main branch or pull request, acceptance-tests.yml fires
    • Constructs a matrix of supported PHP and WordPress versions
    • Uses reusable-acceptance-tests.yml
      • Installs PHP and WordPress
      • Runs the build
      • Runs acceptance testing with wp-browser

Integration testing

  • Push to a main branch or pull request, integration-tests.yml fires
    • Constructs a matrix of supported PHP and WordPress versions
    • Uses reusable-integration-tests.yml
      • Installs PHP and WordPress
      • Runs the build
      • Runs integration testing with wp-browser, once for:
        • Single site
        • Multisite

Coding standards testing

  • Push to a main branch or pull request, coding-standards.yml fires
    • Uses reusable-coding-standards.yml
      • Installs PHP
      • Checks coding standards with PHPCS

Static analysis

  • Push to a main branch or pull request, static-analysis.yml fires
    • Constructs a matrix of supported PHP versions
    • Uses reusable-static-analysis.yml
      • Installs PHP
      • Runs static analysis with PHPStan

Workflow file linting

  • Push to a main branch or pull request, lint-workflows.yml fires
    • Uses reusable-workflow-lint.yml
      • Lints all GitHub Actions workflow files for correctness and security using:
        • ActionLint
        • Octoscan
        • Zizmor
        • Poutine
        • OpenSSF Scorecard
      • Uploads results to GitHub Code Scanning

Deployment to wordpress.org

  • Push to the release branch, build.yml fires
    • Uses reusable-build.yml
      • Runs the build
      • Reads version from package.json
      • Commits built files
      • Pushes to release-$VERSION
      • Tags the new version and pushes
      • Creates a draft release
  • Publish the release, deploy-tag.yml fires
    • Uses reusable-deploy-tag.yml
      • Creates a changelog entry from the release notes
      • Uses 10up/action-wordpress-plugin-deploy
        • Deploys the new version to wordpress.org
        • Generates a zip file
      • Uses johnbillion/action-wordpress-plugin-attestation
        • Fetches the zip from wordpress.org
        • Generates a build provenance attestation if the zip contents matches the build
      • Closes the completed milestone for the release
      • Creates the next major, minor, and patch release milestones

Licence

MIT