ci-app.yml

name: CI - App

on:
  push:
    branches:
      - main
    paths:
      - app/**
      - .github/workflows/ci-app.yml
  pull_request:
    paths:
      - app/**
      - .github/workflows/ci-app.yml

defaults:
  run:
    working-directory: ./app

jobs:
  # As an enhancement, it is possible to share the built docker image and share
  # it across jobs as described in:
  # https://docs.github.com/en/actions/using-workflows/storing-workflow-data-as-artifacts#passing-data-between-jobs-in-a-workflow
  lint:
    name: Lint
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Run format check
        run: make format-check

      - name: Run linting
        run: make lint
  security-scan:
    name: Security scan
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Run security linting
        run: make lint-security
  test:
    name: Test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Start tests
        run: |
          make test-audit
          make test-coverage test-coverage-xml-report

      - name: Post coverage report to PR
        uses: orgoro/coverage@v3.2
        with:
          sourceDir: app
          coverageFile: app/coverage_report.xml
          token: ${{ secrets.GITHUB_TOKEN }}
          thresholdAll: 0.8
          thresholdNew: 0.9
          thresholdModified: 0.8