ci.yml

# This workflow uses actions that are not certified by GitHub.  They are
# provided by a third-party and are governed by separate terms of service,
# privacy policy, and support documentation.
#
# This workflow will install a prebuilt Ruby version, install dependencies, and
# run tests and linters.
name: "CI"
on:
  push:
    branches: [ 'main' ]
  pull_request:
    branches: [ main ]
jobs:

  rspec:
    runs-on: ubuntu-latest
    env:
      RAILS_ENV: test

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install Ruby and gems
        uses: ruby/setup-ruby@2a18b06812b0e15bb916e1df298d3e740422c47e # v1.92
        with:
          bundler-cache: true

      - name: Restore cache
        uses: actions/cache@v4
        with:
          path: |
            **/node_modules
            public/assets/
            public/packs-test/
            tmp/shakapacker
          key: ${{ runner.os }}-assets-${{ hashFiles('**/yarn.lock') }}
          restore-keys: |
            ${{ runner.os }}-assets-

      - uses: actions/setup-node@v4
        with:
          cache: yarn
          node-version: 23.3.0

      - name: 'Yarn Install'
        run: yarn install

      - name: Run tests
        env:
          RAILS_ENV: test
          DB_USER: tentacles_test
          DB_PASSWORD: tentacles_test
        run: bin/rspec

  lint-ruby:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Install Ruby and gems
        uses: ruby/setup-ruby@2a18b06812b0e15bb916e1df298d3e740422c47e # v1.92
        with:
          bundler-cache: true
      # Add or replace any other lints here
      - name: Security audit dependencies
        run: bin/bundler-audit --update
      - name: Security audit application code
        run: bin/brakeman -q -w2
      - name: Lint Ruby files
        run: bin/rubocop --parallel

  lint-javascript:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Restore cache
        uses: actions/cache@v4
        with:
          path: |
            **/node_modules
            public/assets/
            public/packs-test/
            tmp/shakapacker
          key: ${{ runner.os }}-assets-${{ hashFiles('**/yarn.lock') }}
          restore-keys: |
            ${{ runner.os }}-assets-

      - uses: actions/setup-node@v4
        with:
          cache: yarn
          node-version: 23.3.0

      - name: 'Yarn Install'
        run: yarn install

      - name: Lint Javascript files
        run: bin/yarn run eslint app/javascript/**/*.jsx

  assets-compile:
    runs-on: ubuntu-latest
    env:
      RAILS_ENV: production
      SECRET_KEY_BASE: precompile_placeholder
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install Ruby and gems
        uses: ruby/setup-ruby@2a18b06812b0e15bb916e1df298d3e740422c47e # v1.92
        with:
          bundler-cache: true

      - name: Restore cache
        uses: actions/cache@v4
        with:
          path: |
            **/node_modules
            public/assets/
            public/packs-test/
            tmp/shakapacker
          key: ${{ runner.os }}-assets-${{ hashFiles('**/yarn.lock') }}
          restore-keys: |
            ${{ runner.os }}-assets-

      - uses: actions/setup-node@v4
        with:
          cache: yarn
          node-version: 23.3.0

      - name: 'Yarn Install'
        run: yarn install

      - name: Compile assets (js and css)
        run: bin/rails shakapacker:compile