test.yml

name: Test Workflow
on:
  pull_request:
  push:
    branches:
      - main

concurrency:
  group: test-${{ github.ref }}
  cancel-in-progress: true

jobs:
  test:
    runs-on: ubuntu-latest
    permissions:
      checks: write

    env:
      RAILS_ENV: test
      DATABASE_URL: "postgresql://postgres:postgres@127.0.0.1/correspondence_platform_test"
      AWS_ACCESS_KEY_ID: 123
      AWS_SECRET_ACCESS_KEY: 456
      CI_TOTAL_JOBS: ${{ matrix.ci_total_jobs }}
      CI_JOB_INDEX: ${{ matrix.ci_job_index }}
    strategy:
      fail-fast: false
      matrix:
        # Set N number of parallel jobs you want to run.
        # Normally equal to the number of CPU cores but in this case relates to the total number of test groups to be run across all runners.
        ci_total_jobs: [ 4 ]
        # Remember to update ci_node_index below to 0..N-1
        # When you run 2 parallel jobs then first job will have index 0, the second job will have index 1 etc. For larger runners runners with more CPU adjust accordingly.
        ci_job_index:
          [
            "0, 1",
            "2, 3",
          ]

    services:
      postgres:
        image: postgres:12-alpine
        env:
          POSTGRES_DB: correspondence_platform_test
          POSTGRES_USER: postgres
          POSTGRES_PASSWORD: postgres
        ports:
          - 5432:5432
        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Ruby and install gems
        uses: ruby/setup-ruby@v1
        with:
          bundler-cache: true

      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 14.17.5

      - name: Find yarn cache location
        id: yarn-cache
        run: echo "::set-output name=dir::$(yarn cache dir)"

      - name: JS package cache
        uses: actions/cache@v4
        with:
          path: ${{ steps.yarn-cache.outputs.dir }}
          key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
          restore-keys: |
            ${{ runner.os }}-yarn-

      - name: Install packages
        run: |
          yarn install --pure-lockfile

      - name: Setup test database
        env:
          RAILS_ENV: test
        run: bundle exec rake parallel:setup

      - name: Lint Ruby files
        run: bundle exec rubocop

      - name: Security audit application code
        run: bundle exec brakeman -q

      - name: Run unit and feature tests
        env:
          RAILS_ENV: test
        run: |
          echo "\n\n$RAILS_ENV\n\n"
          export COVERAGE=1
          bundle exec rspec

      - name: Code coverage
        uses: joshmfrankel/simplecov-check-action@main
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          minimum_suite_coverage: 92
          minimum_file_coverage: 100

  build-and-deploy:
    if: ${{ github.ref == 'refs/heads/main' }}
    needs: test
    uses: ./.github/workflows/deploy.yml
    secrets: inherit