mirror of
https://github.com/Dvorinka/Bookra.git
synced 2026-10-28 07:41:16 +00:00
Tomáš DvořákandDevin
1cd14046de
- apps/frontend: oxlint 1.85 (typescript/unicorn/oxc — no react rules, SolidJS), oxfmt scripts; lint script now oxlint && tsc --noEmit - backend: gofmt; bump x/text 0.39.0, quic-go 0.59.1, pgx 5.9.2 (govulncheck 0 reachable vulns, was 3) - ci: go vet + govulncheck in Go job (frontend job already gates via lint:frontend) - lefthook pre-push: frontend lint + gofmt + vet/test + gitleaks Authored By: TDvorak <[email protected]> Generated with [Devin](https://devin.ai) Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
133 lines
3.2 KiB
YAML
133 lines
3.2 KiB
YAML
name: CI
|
|
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: ci-${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
frontend:
|
|
name: Frontend
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v5
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v6
|
|
with:
|
|
node-version: "22"
|
|
cache: npm
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Generate API client
|
|
run: npm run generate:api-client
|
|
|
|
- name: Typecheck frontend
|
|
run: npm run lint:frontend
|
|
|
|
- name: Build frontend
|
|
run: npm run build:frontend
|
|
|
|
go:
|
|
name: Go - ${{ matrix.app }}
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
app:
|
|
- apps/backend
|
|
defaults:
|
|
run:
|
|
working-directory: ${{ matrix.app }}
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v5
|
|
|
|
- name: Setup Go
|
|
uses: actions/setup-go@v6
|
|
with:
|
|
go-version-file: ${{ matrix.app }}/go.mod
|
|
cache-dependency-path: ${{ matrix.app }}/go.sum
|
|
|
|
- name: Run tests
|
|
run: go test ./...
|
|
|
|
- name: Vet
|
|
run: go vet ./...
|
|
|
|
- name: Vulnerability scan
|
|
run: go run golang.org/x/vuln/cmd/govulncheck@latest ./...
|
|
|
|
- name: Build service
|
|
run: go build ./...
|
|
|
|
docker:
|
|
name: Docker publish - ${{ matrix.service.name }}
|
|
needs:
|
|
- frontend
|
|
- go
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
service:
|
|
- name: backend
|
|
context: apps/backend
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v5
|
|
|
|
- name: Setup Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Login to GHCR
|
|
if: github.event_name != 'pull_request'
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Resolve image name
|
|
id: image
|
|
env:
|
|
OWNER: ${{ github.repository_owner }}
|
|
SERVICE_NAME: ${{ matrix.service.name }}
|
|
run: |
|
|
echo "repository=$(echo "${OWNER}/bookra-${SERVICE_NAME}" | tr '[:upper:]' '[:lower:]')" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Generate image metadata
|
|
id: meta
|
|
uses: docker/metadata-action@v5
|
|
with:
|
|
images: ghcr.io/${{ steps.image.outputs.repository }}
|
|
tags: |
|
|
type=sha,prefix=
|
|
type=ref,event=branch
|
|
type=raw,value=latest,enable={{is_default_branch}}
|
|
|
|
- name: Build and publish container image
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: ${{ matrix.service.context }}
|
|
push: ${{ github.event_name != 'pull_request' }}
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
labels: ${{ steps.meta.outputs.labels }}
|
|
cache-from: type=gha,scope=${{ matrix.service.name }}
|
|
cache-to: type=gha,mode=max,scope=${{ matrix.service.name }}
|