ci.yaml

name: CI
on:
  push:
    branches:
      - main
  pull_request:
    types: [opened, synchronize, reopened]

env:
  CI: true

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}-CI

jobs:
  main:
    runs-on: ubuntu-latest

    services:
      kratos:
        image: ghcr.io/getlarge/nestjs-ory-integration/kratos:latest
        ports:
          - '44330:4433'
          - '44340:4434'

      keto:
        image: ghcr.io/getlarge/nestjs-ory-integration/keto:latest
        ports:
          - '44660:4466'
          - '44670:4467'

      hydra:
        image: ghcr.io/getlarge/nestjs-ory-integration/hydra:latest
        ports:
          - '44440:4444'
          - '44450:4445'

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      # Cache node_modules
      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: 'npm'

      - run: npm ci

      - uses: nrwl/nx-set-shas@v4

      - uses: 8BitJonny/gh-get-current-pr@3.0.0
        id: current-pr

      - if: steps.current-pr.outputs.number != 'null' && github.ref_name != 'main'
        # This line is needed for nx affected to work when CI is running on a PR
        run: git branch --track main origin/main

      - run: npx nx format:check

      # requires kratos and keto to be running
      - run: npx nx affected -t lint,test,build --parallel=3

      - uses: actions/upload-artifact@v4
        with:
          name: coverage
          path: coverage
          overwrite: true
          retention-days: 1

  sonarcloud:
    name: SonarCloud
    runs-on: ubuntu-latest
    needs: main

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis

      - uses: martinbeentjes/npm-get-version-action@v1.3.1
        id: package-version

      - uses: actions/download-artifact@v4
        with:
          name: coverage
          path: coverage

      - name: SonarCloud Scan
        uses: SonarSource/sonarcloud-github-action@master
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        with:
          args: >
            -Dsonar.projectVersion=${{ steps.package-version.outputs.current-version}}