run-tests-and-sonar-scan.yml

name: Run unit tests
on:
  push:
    branches:
      - main
    paths:
      - '**/*.go'
  pull_request:
    types: [opened, synchronize, reopened]
    paths:
      - '**/*.go'

jobs:
  security_scan:
    name: Security scan
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
        with:
          go-version-file: go.mod
      - name: Install project dependencies
        run: make install-deps docs
      - name: Run Gosec Security Scanner
        uses: securego/gosec@master
        with:
          args: ./...

  test:
    name: Test
    runs-on: ubuntu-latest

    services:
      postgres:
        image: postgres
        env:
          POSTGRES_PASSWORD: postgres
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432:5432
      mock:
        image: shini4i/argo-watcher-mock:v0.0.5
        ports:
          - 8081:8081

    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - uses: actions/setup-go@v4
        with:
          go-version-file: go.mod

      - name: Install project dependencies
        run: make install-deps mocks docs

      - name: Run database migrations
        run: make ci-migrate

      - name: Run tests
        env:
          DB_HOST: localhost
          DB_USER: postgres
          DB_NAME: postgres
          DB_PASSWORD: postgres
          STATE_TYPE: in-memory
          ARGO_URL: http://localhost:8081
        run: make test

      - name: Upload coverage reports to Codecov
        uses: codecov/codecov-action@v3
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: coverage.out