main.yaml

name: Main

on:
  push:
    branches: [main]
  pull_request:
    types: [opened, synchronize]

concurrency:
  # find the branch name for 'pull_request' or on 'push' events
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  test:
    name: Lint and test code
    timeout-minutes: 10
    runs-on: ubuntu-latest

    steps:
      - name: Check out code
        uses: actions/checkout@v3

      - name: Install Nix
        uses: cachix/install-nix-action@v25
        with:
          github_access_token: ${{ secrets.GITHUB_TOKEN }}

      - name: Lint with ruff
        working-directory: ct-app
        run: |
          nix develop -c ruff check . --output-format=github --ignore E501 --target-version=py39

      - name: Test with pytest
        working-directory: ct-app
        run: |
          nix develop -c pytest test

  image:
    name: Build and push container image
    timeout-minutes: 10
    runs-on: ubuntu-latest

    needs:
      - test

    steps:
      - name: Check out code
        uses: actions/checkout@v3

      - name: Calculate environment variables
        shell: sh
        run: echo "SHORT_SHA=`echo ${{ github.event.pull_request.head.sha }} | cut -c1-7`" >> $GITHUB_ENV

      - name: Login to GCP
        id: gcloud
        uses: elgohr/gcloud-login-action@v1 #TODO - v2 is bugged, unable to get outputs
        with:
          account_key: ${{ secrets.GOOGLE_CREDENTIALS }}

      - name: Build and push container image
        uses: elgohr/Publish-Docker-Github-Action@v5
        with:
          workdir: "ct-app"
          dockerfile: "./Dockerfile"
          name: ${{ secrets.GOOGLE_PROJECT }}/${{ secrets.GOOGLE_REPOSITORY }}/cover-traffic
          registry: ${{ secrets.GOOGLE_REGION }}-docker.pkg.dev
          username: ${{ steps.gcloud.outputs.username }}
          password: ${{ steps.gcloud.outputs.password }}
          tags: "${{ env.SHORT_SHA }}"