ci.yml

name: reactome_chatbot CI

on:
  workflow_dispatch:
  pull_request:
    types:
      - opened
      - synchronize
  push:
    branches:
      - main

permissions:
  id-token: write
  contents: read

jobs:
    lint:
        if: ${{ github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch' }}
        runs-on: ubuntu-latest
        steps:
            - uses: actions/checkout@v4

            - name: Set up Python and Poetry
              uses: ./.github/actions/install_python_poetry

            - name: Run linters
              run: |
                  poetry run ruff check .
                  poetry run mypy .
                  poetry run isort --check .

    poetry-check:
        if: ${{ github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch' }}
        runs-on: ${{ matrix.os }}
        strategy:
            matrix:
                os: [ubuntu-latest, macos-13]

        steps:
            - uses: actions/checkout@v4

            - name: Check poetry.lock for changes
              id: check-poetry-lock
              uses: tj-actions/changed-files@v45
              with:
                  files: poetry.lock

            - name: Set up Python and Poetry
              if: steps.check-poetry-lock.outputs.any_changed == 'true'
              uses: ./.github/actions/install_python_poetry

            - name: Verify Python imports
              if: steps.check-poetry-lock.outputs.any_changed == 'true'
              env:
                  PYTHONPATH: ./bin:./src
              run: |
                poetry check
                poetry run python ./.github/actions/verify_imports.py

    docker-build:
        runs-on: ubuntu-latest

        steps:
            - uses: actions/checkout@v4

            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@v3

            - name: Build and push Docker image
              uses: docker/build-push-action@v5
              with:
                  context: .
                  file: ./Dockerfile
                  tags: reactome-chatbot:${{ github.sha }}
                  outputs: type=docker,dest=/tmp/image.tar

            - uses: actions/upload-artifact@v4
              with:
                name: image-artifact
                path: /tmp/image.tar

    docker-push:
        if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
        needs: docker-build
        runs-on: ubuntu-latest

        steps:
            - uses: actions/download-artifact@v4
              with:
                name: image-artifact
                path: /tmp
            - id: get-hash
              run: |
                FULL_SHA=${{ github.sha }}
                echo "SHORT_SHA=${FULL_SHA:0:7}" >> $GITHUB_OUTPUT

            - env:
                  AWS_REGION: us-east-1
              uses: aws-actions/configure-aws-credentials@v4
              with:
                  role-to-assume: ${{ vars.AWS_ROLE }}
                  aws-region: ${{ env.AWS_REGION }}

            - id: login-ecr
              uses: aws-actions/amazon-ecr-login@v2
              with:
                  registry-type: public

            - env:
                AWS_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
                AWS_REGISTRY_ALIAS: reactome
                AWS_REPO: reactome-chatbot
                IMG_TAG: ${{ steps.get-hash.outputs.SHORT_SHA }}
              run: |
                docker load --input /tmp/image.tar
                docker image tag reactome-chatbot:${{ github.sha }} $AWS_REGISTRY/$AWS_REGISTRY_ALIAS/$AWS_REPO:$IMG_TAG
                docker image tag reactome-chatbot:${{ github.sha }} $AWS_REGISTRY/$AWS_REGISTRY_ALIAS/$AWS_REPO:latest
                docker push $AWS_REGISTRY/$AWS_REGISTRY_ALIAS/$AWS_REPO:$IMG_TAG
                docker push $AWS_REGISTRY/$AWS_REGISTRY_ALIAS/$AWS_REPO:latest