verify.yml

name: Verify

on:
  push:
  pull_request:
  workflow_call:
    secrets:
      SONAR_TOKEN:
        required: true

jobs:
  verify:
    runs-on: ubuntu-latest
    env:
      dependabot-run: ${{ github.actor == 'dependabot[bot]' }}
      upload-dev-artifacts: ${{ github.ref != 'refs/heads/development' || github.event_name == 'pull_request' }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Sync PR with target
        if: github.event_name == 'pull_request'
        run: git merge origin/${{ github.event.pull_request.base.ref }} --no-commit

      - name: Get branch names
        id: branch-name
        uses: tj-actions/branch-names@v8

      - name: Use Java 17
        uses: actions/setup-java@v4
        with:
          distribution: 'temurin'
          java-version: '17'
          check-latest: true

      - name: Use Node 18
        uses: actions/setup-node@v4
        with:
          node-version: '18'

      - name: Cache
        uses: actions/cache@v4
        with:
          path: |
            ~/.m2
            ~/.npm
            ./node_modules
            ./node
            ./nx
          key: ${{ runner.os }}-deps-${{ github.run_id }}
          restore-keys: |
            ${{ runner.os }}-deps-
            ${{ runner.os }}-

      - name: Java Dependencies
        working-directory: apps/api
        run: mvn -B dependency:resolve dependency:resolve-plugins

      - name: Node Dependencies
        run: yarn install

      - name: Format Check
        run: npx nx format:check --all

      - name: Lint
        uses: MansaGroup/nrwl-nx-action@v3
        with:
          targets: lint
          all: 'true'
          parallel: 'true'

      - name: Build
        uses: MansaGroup/nrwl-nx-action@v3
        with:
          targets: build
          all: 'true'
          parallel: 'true'

      - name: Test
        uses: MansaGroup/nrwl-nx-action@v3
        with:
          targets: test
          all: 'true'
          parallel: 'true'
          args: '--codeCoverage'

      - name: Merge Test Reports
        run: npm run test:merge
        if: always()

      - name: Frontend Test Execution Report
        uses: frango9000/test-execution-report@v0.0.2
        if: env.dependabot-run == 'false' && always()
        with:
          name: Frontend Tests
          path: coverage/**/jest-junit.xml
          reporter: jest-junit
          fail-on-error: false

      - name: Backend Test Execution Report
        uses: frango9000/test-execution-report@v0.0.2
        if: env.dependabot-run == 'false' && always()
        with:
          name: Backend Tests
          path: apps/api/target/*-reports/merged-*ts.xml
          reporter: java-junit
          fail-on-error: false

      - name: Coverage Report
        uses: frango9000/test-coverage-report@v0.0.4
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          title: "Application"
          disable-comment: ${{ github.event_name == 'push' }}    # Only post on pull request, not on commit
          report-paths: |
            apps/api/target/site/jacoco-*t/jacoco.xml
            coverage/**/lcov.info
          enable-build-fail: false
          file-coverage-error-min: 60
          file-coverage-warn-min: 70
          report-coverage-error-min: 50
          report-coverage-warn-min: 60
          global-coverage-error-min: 40
          global-coverage-warn-min: 50

      - name: Upload Coverage to Codecov
        uses: codecov/codecov-action@v4
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: apps/api/target/site/**/jacoco.xml,coverage/**/lcov.info
          verbose: true

      - name: SonarCloud Scan
        uses: SonarSource/sonarcloud-github-action@v2.1.1
        if: env.dependabot-run == 'false'
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

      - name: Upload Development Backend Artifact
        if: env.upload-dev-artifacts && env.dependabot-run == 'false'
        uses: actions/upload-artifact@v4
        with:
          name: backend
          path: apps/api/target/*.jar

      - name: Upload Development Frontend Artifact
        if: env.upload-dev-artifacts && env.dependabot-run == 'false'
        uses: actions/upload-artifact@v4
        with:
          name: frontend
          path: dist/apps/app