presubmit.yml

# Copyright 2024 EngFlow Inc. All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# Presubmit checks for PRs
name: "presubmit"

on:
  # Trigger on pull request rather than push, so that we can control whether
  # checks are run on a given PR (allowing checks to run automatically on PR
  # updates from third parties can be a security issue).
  pull_request:

concurrency:
  group: ${{ github.workflow }}.${{ github.ref }}
  cancel-in-progress: true

# Recommended here: https://github.com/bazelbuild/bazelisk/issues/88#issuecomment-625178467
env:
  BAZELISK_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  OPAL_RPC_CREDENTIALS: ${{ secrets.OPAL_RPC_CREDENTIALS }}

jobs:
  bazel-builder:
    runs-on:
      - self-hosted
      - os=linux
      - arch=x64
      - os_distribution=debian
      - os_version=12
      - revision=d04e89854b3931f4aaced77aa3a2fcad5834b3a6
    timeout-minutes: 10

    steps:
      - uses: actions/checkout@v4

      - name: Run all tests
        run: |
          # TODO(CUS-345): Enable remote execution
          bazel test --config=noninteractive //...

  golang-builder:
    runs-on:
      - self-hosted
      - "os=${{ matrix.os }}"
      - "arch=${{ matrix.arch }}"
      - "os_distribution=${{ matrix.os_distribution }}"
      - "os_version=${{ matrix.os_version }}"
      - "revision=${{ matrix.revision }}"
    timeout-minutes: 10
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: "linux"
            arch: "x64"
            os_distribution: "debian"
            os_version: "12"
            revision: "d04e89854b3931f4aaced77aa3a2fcad5834b3a6"

          - os: "macos"
            arch: "x64"
            os_distribution: "monterey"
            os_version: "12"
            revision: "d04e89854b3931f4aaced77aa3a2fcad5834b3a6"

          - os: "windows"
            arch: "x64"
            os_distribution: "server"
            os_version: "2022"
            revision: "d04e89854b3931f4aaced77aa3a2fcad5834b3a6"

    steps:
      - uses: actions/checkout@v4

      - name: Run all tests
        run: |
          # TODO(CUS-345): Enable remote execution
          bazel run --config=noninteractive @rules_go//go -- test ./...
          bazel run --config=noninteractive @rules_go//go -- clean -cache -modcache

  copyright-headers-check:
    runs-on:
      - self-hosted
      - os=linux
      - arch=x64
      - os_distribution=debian
      - os_version=12
      - revision=d04e89854b3931f4aaced77aa3a2fcad5834b3a6
    timeout-minutes: 10

    steps:
      - uses: actions/checkout@v4

      - name: Check copyright headers
        run: |
          bazel run --config=noninteractive //infra/internal/check_copyright_headers