ci(deps): Bump docker/login-action from 3 to 4 #34
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================================= | |
| # CI - Compra Programada | Build, Test, Coverage, Quality | |
| # ============================================================================= | |
| name: CI | |
| on: | |
| push: | |
| branches: [main, master, develop] | |
| pull_request: | |
| branches: [main, master, develop] | |
| env: | |
| DOTNET_VERSION: '9.0.x' | |
| SOLUTION_PATH: CompraProgramada.sln | |
| MIN_COVERAGE: 70 | |
| jobs: | |
| # --------------------------------------------------------------------------- | |
| # Restore & Build | |
| # --------------------------------------------------------------------------- | |
| build: | |
| name: Build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Setup .NET | |
| uses: actions/setup-dotnet@v5 | |
| with: | |
| dotnet-version: ${{ env.DOTNET_VERSION }} | |
| - name: Cache NuGet packages | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.nuget/packages | |
| key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj') }} | |
| restore-keys: | | |
| ${{ runner.os }}-nuget- | |
| - name: Restore | |
| run: dotnet restore ${{ env.SOLUTION_PATH }} | |
| - name: Build | |
| run: dotnet build ${{ env.SOLUTION_PATH }} --no-restore -c Release | |
| # --------------------------------------------------------------------------- | |
| # Unit & Integration Tests + Coverage | |
| # --------------------------------------------------------------------------- | |
| test: | |
| name: Test | |
| runs-on: ubuntu-latest | |
| needs: build | |
| permissions: | |
| checks: write | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Setup .NET | |
| uses: actions/setup-dotnet@v5 | |
| with: | |
| dotnet-version: ${{ env.DOTNET_VERSION }} | |
| - name: Cache NuGet packages | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.nuget/packages | |
| key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj') }} | |
| restore-keys: | | |
| ${{ runner.os }}-nuget- | |
| - name: Restore | |
| run: dotnet restore ${{ env.SOLUTION_PATH }} | |
| - name: Run tests with coverage | |
| run: | | |
| dotnet test ${{ env.SOLUTION_PATH }} \ | |
| --no-restore \ | |
| -c Release \ | |
| --logger "trx;LogFileName=test-results.trx" \ | |
| --collect:"XPlat Code Coverage" \ | |
| --results-directory ./TestResults \ | |
| --settings tests/CompraProgramada.Tests/coverlet.runsettings | |
| - name: Install ReportGenerator | |
| run: dotnet tool install -g dotnet-reportgenerator-globaltool | |
| if: always() | |
| - name: Generate coverage report | |
| run: | | |
| reportgenerator \ | |
| "-reports:**/coverage.cobertura.xml" \ | |
| "-targetdir:./CoverageReport" \ | |
| "-reporttypes:Html;HtmlSummary;TextSummary;Cobertura;Badges" | |
| if: always() | |
| - name: Check coverage threshold | |
| run: | | |
| if [ -f ./CoverageReport/Summary.txt ]; then | |
| COV=$(grep -oP 'Line coverage: \K[0-9.]+' ./CoverageReport/Summary.txt 2>/dev/null || echo "0") | |
| echo "Line coverage: ${COV}%" | |
| if [ -n "$COV" ] && [ "${COV%.*}" -lt "${{ env.MIN_COVERAGE }}" ] 2>/dev/null; then | |
| echo "::warning::Coverage ${COV}% is below minimum ${{ env.MIN_COVERAGE }}%" | |
| fi | |
| else | |
| echo "No coverage report generated (no tests or coverlet not configured)." | |
| fi | |
| if: always() | |
| - name: Upload test results (TRX) | |
| uses: actions/upload-artifact@v7 | |
| if: always() | |
| with: | |
| name: test-results | |
| path: '**/TestResults/*.trx' | |
| - name: Upload coverage report | |
| uses: actions/upload-artifact@v7 | |
| if: always() | |
| with: | |
| name: coverage-report | |
| path: ./CoverageReport | |
| - name: Test Report (PR summary) | |
| uses: dorny/test-reporter@v2 | |
| if: always() && github.event_name == 'pull_request' | |
| with: | |
| name: Test Results | |
| path: '**/TestResults/*.trx' | |
| reporter: dotnet-trx | |
| fail-on-error: false | |
| # --------------------------------------------------------------------------- | |
| # Code format & quality (dotnet format) | |
| # --------------------------------------------------------------------------- | |
| format: | |
| name: Format check | |
| runs-on: ubuntu-latest | |
| needs: build | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Setup .NET | |
| uses: actions/setup-dotnet@v5 | |
| with: | |
| dotnet-version: ${{ env.DOTNET_VERSION }} | |
| - name: Install dotnet-format | |
| run: dotnet tool install -g dotnet-format | |
| - name: Verify format | |
| run: dotnet format ${{ env.SOLUTION_PATH }} --verify-no-changes -v diagnostic | |
| continue-on-error: true | |
| # --------------------------------------------------------------------------- | |
| # Security: dependency audit | |
| # --------------------------------------------------------------------------- | |
| security: | |
| name: Security audit | |
| runs-on: ubuntu-latest | |
| needs: build | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Setup .NET | |
| uses: actions/setup-dotnet@v5 | |
| with: | |
| dotnet-version: ${{ env.DOTNET_VERSION }} | |
| - name: Restore | |
| run: dotnet restore ${{ env.SOLUTION_PATH }} | |
| - name: List vulnerable packages | |
| run: | | |
| dotnet list package --vulnerable --include-transitive 2>/dev/null || true | |
| continue-on-error: true | |
| # --------------------------------------------------------------------------- | |
| # CI success gate | |
| # --------------------------------------------------------------------------- | |
| ci-success: | |
| name: CI Success | |
| runs-on: ubuntu-latest | |
| needs: [build, test, format] | |
| if: always() && needs.build.result == 'success' && (needs.test.result == 'success' || needs.test.result == 'skipped') && (needs.format.result == 'success' || needs.format.result == 'skipped') | |
| steps: | |
| - name: All checks passed | |
| run: echo "CI pipeline completed." |