merge to master

.github/labeler.yml

@@ -27,16 +27,4 @@ labels:
 
   ':hammer: REFACTOR':
     include:
-      ['\bRefactor\b', '\bREFACTOR\b', '\brefactor\b']
-
-  ':nail_care: FRONTEND':
-    include:
-      ['\bFrontend\b', '\bfrontend\b', '\bFRONTEND\b']
-
-  ':page_facing_up: AI':
-    include:
-      ['\bAI\b', '\bai\b', '\bAi\b']
-
-  ':rocket: BACKEND':
-    include:
-      ['\bbackend\b', '\bBackend\b', '\bBACKEND\b']
+      ['\bRefactor\b', '\bREFACTOR\b', '\brefactor\b']

.github/workflows/backend-cd.yml

@@ -0,0 +1,58 @@
+name: Secure Backend CD
+
+on:
+  push:
+    branches:
+      - develop
+    paths:
+      - "backend/**"
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment: secretconfig
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'temurin'
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x ./backend/gradlew
+
+      - name: Build backend application
+        working-directory: ./backend
+        run: ./gradlew build -x test
+
+      - name: Prepare SSH key
+        run: |
+          echo "${{ secrets.SSH_PRIVATE_KEY }}" > key.pem
+          chmod 600 key.pem
+
+      - name: Add remote host to known_hosts
+        run: |
+          mkdir -p ~/.ssh
+          ssh-keyscan -H ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts
+
+      - name: Copy JAR to EC2 server
+        run: |
+          scp -i key.pem ./backend/build/libs/backend-0.0.1-SNAPSHOT.jar ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}:~/capstone-2025-24/backend/build/libs/
+
+      - name: Deploy on EC2 via SSH
+        env:
+          APP_YML: ${{ secrets.APPLICATION_YML }}
+        run: |
+          ssh -i key.pem ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }} << 'EOF'
+          cd ~/capstone-2025-24
+          git pull
+          cat > backend/src/main/resources/application.yml << 'END_YML'
+          $APP_YML
+          END_YML
+          docker-compose down
+          docker-compose build
+          docker-compose up -d
+          EOF

.github/workflows/backend-ci.yml

@@ -0,0 +1,87 @@
+name: Backend CI
+
+on:
+  push:
+    paths:
+      - "backend/**"
+  pull_request:
+    paths:
+      - "backend/**"
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    environment: secretconfig
+    permissions:
+      contents: read
+    defaults:
+      run:
+        working-directory: ./backend
+
+    services:
+      postgres:
+        image: postgres:15
+        env:
+          POSTGRES_USER: testuser
+          POSTGRES_PASSWORD: testpassword
+          POSTGRES_DB: testdb
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U testuser -d testdb"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'temurin'
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0
+
+      - name: Build with Gradle Wrapper
+        run: ./gradlew build -x test
+
+      - name: Run Tests
+        env:
+          SPRING_DATASOURCE_URL: jdbc:postgresql://localhost:5432/testdb
+          SPRING_DATASOURCE_USERNAME: testuser
+          SPRING_DATASOURCE_PASSWORD: testpassword
+          CORS_ALLOWED_ORIGINS: ${{ secrets.CORS_ALLOWED_ORIGINS }}
+          CCTV_STREAM_URL_PREFIX: ${{ secrets.CCTV_STREAM_URL_PREFIX }}
+          CLOUD_AWS_BUCKET: ${{secrets.CLOUD_AWS_BUCKET}}
+          CLOUD_AWS_REGION_STATIC: ${{secrets.CLOUD_AWS_REGION_STATIC}}
+          CLOUD_AWS_CREDENTIALS_ACCESS_KEY: ${{secrets.CLOUD_AWS_CREDENTIALS_ACCESS_KEY}}
+          CLOUD_AWS_CREDENTIALS_SECRET_KEY: ${{secrets.CLOUD_AWS_CREDENTIALS_SECRET_KEY}}
+        run: ./gradlew test
+
+  dependency-submission:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    defaults:
+      run:
+        working-directory: ./backend
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'temurin'
+
+      - name: Generate and submit dependency graph
+        uses: gradle/actions/dependency-submission@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0
+        with:
+          gradle-version: '8.12.1'
+          build-root-directory: ./backend
+

.github/workflows/frontend-ci.yml

@@ -19,23 +19,20 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
 
+      - name: Check file structure
+        run: ls -R
+
       - name: Set up Node.js
         uses: actions/setup-node@v3
         with:
           node-version: ${{ matrix.node-version }}
-          cache: 'yarn'
+          cache: "yarn"
+          cache-dependency-path: "./frontend/yarn.lock"
 
       - name: Install dependencies
-        run: |
-          cd frontend
-          yarn install --frozen-lockfile
-
-      - name: Run tests
-        run: |
-          cd frontend
-          yarn test
+        working-directory: frontend
+        run: yarn install --frozen-lockfile
 
       - name: Build project
-        run: |
-          cd frontend
-          yarn build
+        working-directory: frontend
+        run: yarn build

.github/workflows/label.yml

@@ -5,7 +5,7 @@ on:
     types: [opened]
   pull_request_target:
     types: [opened]
-    
+
 jobs:
   labeler:
     runs-on: ubuntu-latest
@@ -18,4 +18,35 @@ jobs:
         id: labeler
         uses: jimschubert/labeler-action@v1
         with:
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Add labels based on user
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const author = context.payload.pull_request 
+              ? context.payload.pull_request.user.login 
+              : context.payload.issue.user.login;
+
+            const userLabels = {
+              "hummingbbird": ":nail_care: FRONTEND",
+              "HeeNamgoong": ":nail_care: FRONTEND",
+              "seo0o519": ":nail_care: FRONTEND",
+              "hyni03": ":rocket: BACKEND",
+              "mjk25": ":rocket: BACKEND",
+              "justpers": ":page_facing_up: AI"
+            };
+
+            const labelToAdd = userLabels[author];
+
+            if (labelToAdd) {
+              github.rest.issues.addLabels({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.payload.pull_request 
+                  ? context.payload.pull_request.number 
+                  : context.payload.issue.number,
+                labels: [labelToAdd]
+              });
+            }