test.yaml

name: Test

on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]

jobs:
  test:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v3
      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: '3.2'
          bundler-cache: true

      - name: Run rubocop
        run: bundle exec rubocop --parallel -c .rubocop.yml

      # - name: Run typecheck
      #   run: |
      #     bundle exec tapioca init && \
      #     bundle exec rake rails_rbi:routes && \
      #     bundle exec tapioca dsl && \
      #     bundle exec srb typecheck -q

      # - name: Run security checks
      #   run: |
      #     bin/bundler-audit --update
      #     bin/brakeman -q -w2

      - name: Run tests
        run: bundle exec rake test

  docker:
    runs-on: ubuntu-latest
    needs: [test]
    if: github.ref == 'refs/heads/master'

    permissions:
      contents: read
      packages: write
      attestations: write
      id-token: write

    steps:
      - name: Docker Build and Push
        uses: cartoway/docker-compose-build-push-action@main
        with:
          registry_password: ${{ secrets.GITHUB_TOKEN }}