ci_lint_and_test.yml

name: ci_lint_and_test

on:
  pull_request:
    branches: [main]
  push:
    branches: [main]
  merge_group:

jobs:

  run-pre-commit:
    name: Run pre-commit
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Code Repository
        uses: actions/checkout@v4

      - name: Run pre-commit
        uses: pre-commit/action@v3.0.0

  run-tests:
    name: Run tests
    runs-on: ubuntu-latest
    steps:
      - name: Checkout source code
        uses: actions/checkout@v4.1.1
        with:
          ref: ${{ github.event.pull_request.head.sha }}

      - name: Set up Python 3.12
        uses: actions/setup-python@v5.0.0
        with:
          python-version: "3.12"

      - name: pip install tests dependencies
        run: |
          pip3 install -r src/tests/requirements.txt

      - name: Run python tests with coverage
        env:
          SPARQL_USERNAME: ${{ secrets.SPARQL_USERNAME }}
          SPARQL_PASSWORD: ${{ secrets.SPARQL_PASSWORD }}
        id: run_python_tests
        run: coverage run --source . -m pytest

      - name: Generate coverage XML
        run: coverage xml

      - name: Upload coverage to CodeClimate
        uses: paambaati/codeclimate-action@v5.0.0
        env:
          CC_TEST_REPORTER_ID: ${{secrets.CC_TEST_REPORTER_ID}}

  terraform_lint:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout source code
        uses: actions/checkout@v4.1.1
        with:
          ref: ${{ github.event.pull_request.head.sha }}

      - name: Install TFLint
        uses: terraform-linters/setup-tflint@v4.0.0
        with:
          tflint_version: v0.38.1
        continue-on-error: false

      - name: Run TFLint
        id: run_tflint
        run: |
          tflint --init
          tflint -f compact --loglevel warn

  terraform_validate:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout source code
        uses: actions/checkout@v4.1.1
        with:
          ref: ${{ github.event.pull_request.head.sha }}

      - name: Get terraform version
        id: get-terraform-version
        run: |
          DOTFILE_VERSION=$(cat terraform/.terraform-version)
          echo "version=$DOTFILE_VERSION" >> $GITHUB_OUTPUT

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v3.0.0
        continue-on-error: false
        with:
          terraform_version: ${{ steps.get-terraform-version.outputs.version }}

      - name: Run Terraform Validate
        id: run_terraform_validate
        run: |
          set -e
          set -o pipefail
          cd terraform
          terraform init -backend=false
          terraform validate -no-color
        continue-on-error: false

  terraform_plan-staging:
    uses: ./.github/workflows/terraform_plan.yml
    secrets:
      aws_oidc_role_arn: ${{ secrets.AWS_OIDC_ROLE_ARN }}
      account_id: ${{ secrets.STAGING_ACCOUNT_ID }}
      workspace: tna-staging
      app_env: staging

  terraform_plan-production:
    uses: ./.github/workflows/terraform_plan.yml
    secrets:
      aws_oidc_role_arn: ${{ secrets.AWS_OIDC_ROLE_ARN_PROD }}
      account_id: ${{ secrets.PROD_ACCOUNT_ID }}
      workspace: tna-prod
      app_env: production