update GH CI from rails template

Author: koffeinfrei

www/.github/dependabot.yml .github/dependabot.ymlwww/.github/dependabot.yml renamed to .github/dependabot.yml

@@ -1,12 +1,12 @@
 version: 2
 updates:
 - package-ecosystem: bundler
-  directory: "/"
+  directory: "/www"
   schedule:
     interval: daily
   open-pull-requests-limit: 10
 - package-ecosystem: github-actions
-  directory: "/"
+  directory: "/www"
   schedule:
     interval: daily
   open-pull-requests-limit: 10

.github/workflows/cli.yml

@@ -1,6 +1,9 @@
 name: CLI
 
-on: [push]
+on:
+  pull_request:
+  push:
+    branches: [main]
 
 jobs:
   build:

.github/workflows/www.yml

@@ -1,23 +1,78 @@
 name: WWW
 
-on: [push]
+defaults:
+  run:
+    working-directory: ./www
+
+on:
+  pull_request:
+  push:
+    branches: [main]
 
 jobs:
-  build:
+  scan_ruby:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v1
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: .ruby-version
+          bundler-cache: true
+
+      - name: Scan for common Rails security vulnerabilities using static analysis
+        run: bin/brakeman --no-pager
 
-      - name: Set the NODE_VERSION env variable from NVM
-        run: echo NODE_VERSION=$(cat www/.nvmrc) >> $GITHUB_ENV
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
 
-      - uses: actions/setup-node@v2
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
         with:
-          node-version: "${{ env.NODE_VERSION }}"
+          ruby-version: .ruby-version
+          bundler-cache: true
 
-      - name: Install dependencies
-        run: cd www && npm install
+      - name: Lint code for consistent style
+        run: bin/rubocop -f github
+
+  test:
+    runs-on: ubuntu-latest
 
-      - name: Lint
-        run: cd www && npm run lint
+    # services:
+    #  redis:
+    #    image: redis
+    #    ports:
+    #      - 6379:6379
+    #    options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5
+    steps:
+      - name: Install packages
+        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y build-essential git pkg-config google-chrome-stable
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: .ruby-version
+          bundler-cache: true
+
+      - name: Run tests
+        env:
+          RAILS_ENV: test
+          # REDIS_URL: redis://localhost:6379/0
+        run: bin/rails db:test:prepare test test:system
+
+      - name: Keep screenshots from failed system tests
+        uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: screenshots
+          path: ${{ github.workspace }}/tmp/screenshots
+          if-no-files-found: ignore