devtoolbox/.github/workflows/ci.yml at main · vuon9/devtoolbox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
name: CI

on:
  pull_request:
    branches:
      - main
  push:
    branches:
      - main
  # Allow manual trigger
  workflow_dispatch:

jobs:
  build:
    name: Build
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - name: Checkout
        uses: actions/checkout@v6.0.3

      - name: Setup Go
        uses: actions/setup-go@v6.4.0
        with:
          go-version: "1.25.0"
          check-latest: true

      - name: Install Linux dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y libgtk-4-dev libwebkitgtk-6.0-dev libvulkan-dev libgraphene-1.0-dev

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2.2.0
        with:
          bun-version: latest

      - name: Cache Bun dependencies
        uses: actions/cache@v5.0.5
        with:
          path: |
            frontend/node_modules
            ~/.bun/install/cache
          key: bun-deps-${{ runner.os }}-${{ hashFiles('frontend/bun.lock') }}
          restore-keys: |
            bun-deps-${{ runner.os }}-

      - name: Install frontend dependencies
        run: |
          cd frontend && bun install

      - name: Build frontend
        run: |
          cd frontend && bun run build

      - name: Build Go application
        run: |
          go build .

  backend-tests:
    name: Backend Tests
    needs: build
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
      contents: read

    steps:
      - name: Checkout
        uses: actions/checkout@v6.0.3

      - name: Setup Go
        uses: actions/setup-go@v6.4.0
        with:
          go-version: "1.25.0"
          check-latest: true

      - name: Run Go Tests
        run: |
          go test -race -count=1 ./internal/... -coverprofile=coverage.out
          go install github.com/boumenot/gocover-cobertura@latest
          gocover-cobertura < coverage.out > coverage.xml

      - name: Code Coverage Report
        if: github.event_name == 'pull_request'
        uses: irongut/CodeCoverageSummary@v1.3.0
        with:
          filename: coverage.xml
          badge: true
          fail_below_min: true
          format: markdown
          hide_branch_rate: false
          hide_complexity: true
          indicators: true
          output: both
          thresholds: "60 80"

      - name: Code Coverage Comment
        uses: marocchino/sticky-pull-request-comment@v3.0.4
        if: github.event_name == 'pull_request'
        with:
          recreate: true
          path: code-coverage-results.md

  govulncheck:
    name: Go Vulnerability Check
    needs: build
    runs-on: ubuntu-latest
    permissions:
      contents: read
      security-events: write

    steps:
      - name: Checkout
        uses: actions/checkout@v6.0.3

      - name: Setup Go
        uses: actions/setup-go@v6.4.0
        with:
          go-version: "1.25.0"
          check-latest: true

      - name: Install system deps (Wails CGO)
        run: |
          sudo apt-get update
          sudo apt-get install -y libgtk-4-dev libwebkitgtk-6.0-dev libvulkan-dev libgraphene-1.0-dev

      - name: Run govulncheck
        run: |
          go install golang.org/x/vuln/cmd/govulncheck@latest
          govulncheck ./internal/... || true

  frontend-tests:
    name: Frontend Tests
    needs: build
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write

    steps:
      - name: Checkout
        uses: actions/checkout@v6.0.3

      - name: Setup Go
        uses: actions/setup-go@v6.4.0
        with:
          go-version: "1.25.0"
          check-latest: true

      - name: Install Linux dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y libgtk-4-dev libwebkitgtk-6.0-dev libvulkan-dev libgraphene-1.0-dev

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2.2.0
        with:
          bun-version: latest

      - name: Cache Bun dependencies
        uses: actions/cache@v5.0.5
        with:
          path: |
            frontend/node_modules
            ~/.bun/install/cache
          key: bun-deps-${{ runner.os }}-${{ hashFiles('frontend/bun.lock') }}
          restore-keys: |
            bun-deps-${{ runner.os }}-

      - name: Install frontend dependencies
        run: |
          cd frontend && bun install

      - name: Format check
        run: |
          cd frontend && bun run format:check

      - name: Run frontend tests
        run: |
          cd frontend && bun run test