ci.yml

name: CI

on:
  workflow_dispatch:
  pull_request:
    branches: [main]

jobs:
  audit:
    name: Audit
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repo
        uses: actions/checkout@v3
      - name: Install
        uses: ./.github/actions/install
      - name: Audit Dependencies
        # when a vulnerability is found that fails the build, try to use
        # `pnpm audit --fix` which will override version within
        # package.json#pnpm.overrides to patched version.
        # Second, use package.json#pnpm.auditConfig.ignoreCves if harmless.
        run: pnpm audit --audit-level moderate

  license-check:
    name: License Check
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repo
        uses: actions/checkout@v3
      - name: Install
        uses: ./.github/actions/install
      - name: Check Licenses
        run: pnpm license-check

  build:
    name: Build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repo
        uses: actions/checkout@v3
      - name: Install
        uses: ./.github/actions/install
      - name: Compile TypeScript
        run: pnpm build

  lint:
    name: Lint
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repo
        uses: actions/checkout@v3
      - name: Install
        uses: ./.github/actions/install
      - name: Lint
        run: pnpm lint

  unit-tests:
    name: Unit Tests
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repo
        uses: actions/checkout@v3
      - name: Install
        uses: ./.github/actions/install
      - name: Test
        run: pnpm test

  # TODO: only run on infra change
  # gboost-create-tests:
  #   needs: unit-tests
  #   name: gboost-create-tests
  #   runs-on: ubuntu-latest
  #   strategy:
  #     matrix:
  #       scenario: [0]
  #   permissions:
  #     id-token: write
  #     contents: read
  #   steps:
  #     - name: Checkout Repo
  #       uses: actions/checkout@v3
  #     - name: Install
  #       uses: ./.github/actions/install
  #     - name: Configure AWS credentials
  #       uses: aws-actions/configure-aws-credentials@v1
  #       with:
  #         role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
  #         aws-region: us-east-1
  #         role-session-name: GitHubActionSession
  #     - name: gboost-create-tests
  #       run: cd packages/gboost && pnpm test:gboost-create --scenario ${{ matrix.scenario }}

  # TODO: only run on infra change
  # gboost-create-test-windows:
  #   needs: unit-tests
  #   name: gboost-create-test-windows
  #   runs-on: windows-latest
  #   permissions:
  #     id-token: write
  #     contents: read
  #   steps:
  #     - name: Checkout Repo
  #       uses: actions/checkout@v3
  #     - name: Install
  #       uses: ./.github/actions/install
  #     - name: Configure AWS credentials
  #       uses: aws-actions/configure-aws-credentials@v1
  #       with:
  #         role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
  #         aws-region: us-east-1
  #         role-session-name: GitHubActionSession
  #     - name: gboost-create-tests-windows
  #       run: cd packages/gboost && pnpm test:gboost-create --scenario 0

# stops workflows in progress if a new commit is added to PR
concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true