ci.yaml

name: CI

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - '**'

jobs:
  ci:
    runs-on: ubuntu-latest

    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}
      cancel-in-progress: true

    services:
      db:
        image: postgres:10.19
        env:
          POSTGRES_DB: killswitch_test
          POSTGRES_USER: postgres
          POSTGRES_PASSWORD: postgres
        ports: ['5432:5432']
        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5

    env:
      CANONICAL_HOST: localhost
      DATABASE_URL: postgres://postgres:postgres@localhost/killswitch_test
      MAILER_FROM: localhost
      RAILS_ENV: test

    steps:
      - uses: actions/checkout@v3

      - uses: actions/setup-node@v3
        with:
          node-version: 16
          cache: npm

      - uses: ruby/setup-ruby@v1
        with:
          bundler-cache: true

      - run: npm install
      - run: make check
      - run: make lint
      - run: make test
      - run: make build

      - uses: aquasecurity/trivy-action@master
        with:
          scan-type: 'config'
          ignore-unfixed: true
          format: table
          severity: 'CRITICAL,HIGH'
          skip-dirs: vendor,node_modules
          exit-code: 1