ci.yml

name: CI/CD Pipeline

on:
  push:
    branches: [ master, develop ]
  pull_request:
    branches: [ master, develop ]

jobs:
  build-and-test:
    name: Build and Test
    runs-on: ubuntu-latest
    
    strategy:
      matrix:
        dotnet-version: ['8.0.x']
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4
      with:
        fetch-depth: 0  # Shallow clones should be disabled for better analysis
    
    - name: Setup .NET
      uses: actions/setup-dotnet@v4
      with:
        dotnet-version: ${{ matrix.dotnet-version }}
    
    - name: Cache NuGet packages
      uses: actions/cache@v4
      with:
        path: ~/.nuget/packages
        key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj') }}
        restore-keys: |
          ${{ runner.os }}-nuget-
    
    - name: Restore dependencies
      run: dotnet restore
    
    - name: Build solution
      run: dotnet build --no-restore --configuration Release
    
    - name: Run tests
      run: dotnet test --no-build --configuration Release --verbosity normal --logger trx --results-directory TestResults
    
    - name: Publish test results
      uses: dorny/test-reporter@v2
      if: success() || failure()
      with:
        name: .NET Test Results
        path: TestResults/*.trx
        reporter: dotnet-trx
        fail-on-error: true
    
    - name: Upload test results
      uses: actions/upload-artifact@v4
      if: always()
      with:
        name: test-results
        path: TestResults/
        retention-days: 30

  code-quality:
    name: Code Quality Analysis
    runs-on: ubuntu-latest
    needs: build-and-test
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
    
    - name: Setup .NET
      uses: actions/setup-dotnet@v4
      with:
        dotnet-version: '8.0.x'
    
    - name: Restore dependencies
      run: dotnet restore
    
    - name: Build solution
      run: dotnet build --no-restore --configuration Release
    
    - name: Run code analysis
      run: dotnet build --verbosity normal --configuration Release /p:TreatWarningsAsErrors=true

  package:
    name: Create NuGet Package
    runs-on: ubuntu-latest
    needs: [build-and-test, code-quality, tag-version]
    if: github.ref == 'refs/heads/master'
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
    
    - name: Setup .NET
      uses: actions/setup-dotnet@v4
      with:
        dotnet-version: '8.0.x'
    
    - name: Install GitVersion
      uses: gittools/actions/gitversion/setup@v0.10.2
      with:
        versionSpec: '5.x'
    
    - name: Determine version
      id: gitversion
      uses: gittools/actions/gitversion/execute@v0.10.2
      with:
        useConfigFile: true
    
    - name: Restore dependencies
      run: dotnet restore
    
    - name: Pack NuGet packages
      run: |
        VERSION="${{ steps.gitversion.outputs.nuGetVersionV2 }}"
        echo "Creating NuGet packages with version: $VERSION"
        dotnet pack Iso20022Library.Domain/Iso20022Library.Domain.csproj --no-restore --configuration Release --output ./packages /p:Version=$VERSION
        dotnet pack Iso20022Library.Messages/Iso20022Library.Messages.csproj --no-restore --configuration Release --output ./packages /p:Version=$VERSION
        dotnet pack Iso20022Library.Infrastructure/Iso20022Library.Infrastructure.csproj --no-restore --configuration Release --output ./packages /p:Version=$VERSION
        dotnet pack Iso20022Library.Application/Iso20022Library.Application.csproj --no-restore --configuration Release --output ./packages /p:Version=$VERSION
    
    - name: Upload NuGet packages
      uses: actions/upload-artifact@v4
      with:
        name: nuget-packages-v${{ steps.gitversion.outputs.majorMinorPatch }}
        path: ./packages/*.nupkg
        retention-days: 90

  security-scan:
    name: Security Scan
    runs-on: ubuntu-latest
    needs: build-and-test
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4
    
    - name: Setup .NET
      uses: actions/setup-dotnet@v4
      with:
        dotnet-version: '8.0.x'
    
    - name: Restore dependencies
      run: dotnet restore
    
    - name: Run vulnerability scan
      run: dotnet list package --vulnerable --include-transitive
      continue-on-error: true
    
    - name: Install and run security scan (optional)
      run: |
        # Try to install and run security-scan, but don't fail if it doesn't work
        if dotnet tool install --global security-scan --version 5.6.7; then
          echo "Security scan tool installed successfully"
          if security-scan Iso20022Library.sln; then
            echo "Security scan completed successfully"
          else
            echo "Security scan failed, but continuing..."
          fi
        else
          echo "Failed to install security scan tool, skipping..."
        fi
      continue-on-error: true
    
    - name: Run built-in code analysis
      run: dotnet build --configuration Release --verbosity minimal /p:RunAnalyzersDuringBuild=true /p:TreatWarningsAsErrors=false
      continue-on-error: true

  tag-version:
    name: Create Version Tag
    runs-on: ubuntu-latest
    needs: [build-and-test, code-quality]
    if: github.ref == 'refs/heads/master' && github.event_name == 'push'
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
        token: ${{ secrets.GITHUB_TOKEN }}
    
    - name: Setup .NET
      uses: actions/setup-dotnet@v4
      with:
        dotnet-version: '8.0.x'
    
    - name: Install GitVersion
      uses: gittools/actions/gitversion/setup@v0.10.2
      with:
        versionSpec: '5.x'
    
    - name: Determine version
      id: gitversion
      uses: gittools/actions/gitversion/execute@v0.10.2
      with:
        useConfigFile: true
    
    - name: Create version tag
      run: |
        VERSION="${{ steps.gitversion.outputs.majorMinorPatch }}"
        TAG_NAME="v$VERSION"
        
        # Check if tag already exists
        if git tag -l "$TAG_NAME" | grep -q "$TAG_NAME"; then
          echo "Tag $TAG_NAME already exists, skipping..."
        else
          echo "Creating tag: $TAG_NAME"
          git config --local user.email "action@github.com"
          git config --local user.name "GitHub Action"
          git tag -a "$TAG_NAME" -m "Release version $VERSION"
          git push origin "$TAG_NAME"
          echo "Created and pushed tag: $TAG_NAME"
        fi
    
    - name: Create GitHub Release
      uses: softprops/action-gh-release@v2
      with:
        tag_name: v${{ steps.gitversion.outputs.majorMinorPatch }}
        name: Release ${{ steps.gitversion.outputs.majorMinorPatch }}
        body: |
          ## 🚀 Release ${{ steps.gitversion.outputs.majorMinorPatch }}
          
          **Build:** ${{ github.sha }}
          **Branch:** ${{ github.ref_name }}
          
          ### 📦 NuGet Packages
          - Iso20022Library.Domain
          - Iso20022Library.Messages  
          - Iso20022Library.Infrastructure
          - Iso20022Library.Application
          
          ### 🧪 Tests
          All ${{ github.event.head_commit.message }} tests passed successfully.
          
          ---
          *Auto-generated release from CI/CD pipeline*
        draft: false
        prerelease: false
        generate_release_notes: true
        token: ${{ secrets.GITHUB_TOKEN }}