ci.yaml

# See: https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax

name: CI

permissions:
  contents: read

on:
  push:
    branches: [ "main" ]
    paths-ignore:
      - '**.md'
  pull_request:
    branches: [ "main" ]
    paths-ignore:
      - '**.md'

jobs:
  test:
    name: Build + Lint + Fmt + Test
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Install asdf
        uses: asdf-vm/actions/setup@v4

      - name: Install Task
        run: |
          asdf plugin add task
          asdf install task

      - name: Install (rest of the) Tools
        run: task tools.install

      - name: Vulnerability Scan
        run: task vuln

      - name: Build
        run: task build

      - name: Check for Linting or Formatting issues
        run: |
          task lint-fix
          task fmt
          git diff --exit-code

      - name: Test with Coverage report
        env:
          SPELUNK_1PASSWORD_TEST_SATOKEN: ${{ secrets.SPELUNK_1PASSWORD_TEST_SATOKEN }}
        run: |
          task test.ci
          go tool cover -func=coverage.out > coverage.txt
          echo "## Test Coverage Report" >> $GITHUB_STEP_SUMMARY
          echo '```' >> $GITHUB_STEP_SUMMARY
          cat coverage.txt >> $GITHUB_STEP_SUMMARY
          echo '```' >> $GITHUB_STEP_SUMMARY