health-check.yml

name: Check code health

on:
  push:
    branches: [master, main]

jobs:
  Scan:
    name: Secrets Scan
    runs-on: ubuntu-latest
    steps:
      - name: Check out the repository code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Scan the repository to find hardcoded secrets
        uses: gitleaks/gitleaks-action@v2
        env:
          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}

  Tests:
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest]
        include:
          - os: macOS-latest
            shell: bash
          - os: ubuntu-latest
            shell: bash
    runs-on: ${{ matrix.os }}
    defaults:
      run:
        shell: ${{ matrix.shell }}
    steps:
      - name: Clean up linuxOS
        if: runner.os != 'macOS'
        run: sudo apt-get install build-essential

      - name: Cleanup macOS
        if: runner.os == 'macOS'
        run: |
          sudo rm -rf /Applications/Xcode.app \
                      /Library/Developer/CommandLineTools
          sudo xcode-select --reset

      - name: Install Homebrew
        run: /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install.sh)"
        env:
          NONINTERACTIVE: 1

      - name: Set up Homebrew PATH
        run: |
          if [[ "${{ runner.os }}" = "macOS" ]]
          then
            echo "/usr/local/bin:/usr/bin:/bin" >> "${GITHUB_PATH}"
          else
            echo "/home/linuxbrew/.linuxbrew/bin:/usr/bin:/bin" >> "${GITHUB_PATH}"
          fi

      - name: Run install script
        run: /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/YasminTeles/dotfiles/HEAD/install.sh)"
        env:
          CI: true