ci.yaml

name: CI

on:
    workflow_dispatch:
    push:
        branches:
            - 'main'
    pull_request:
        branches:
            - 'main'

env:
    NODE_VERSION: 20
    PNPM_VERSION: 8
    IMAGE_PLATFORMS: 'linux/amd64,linux/arm64'
    IMAGE_REGISTRY: 'ghcr.io'
    COMMIT_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
    BRANCH_OR_TAG: ${{ github.event.pull_request.head.ref || github.ref_name }}

jobs:
    check:
        runs-on: ubuntu-22.04
        steps:
            - name: Checkout
              uses: actions/checkout@v3

            - name: Set up pnpm
              uses: pnpm/action-setup@v2
              with:
                  version: ${{ env.PNPM_VERSION }}

            - name: Set up Node.js
              uses: actions/setup-node@v3
              with:
                  node-version: ${{ env.NODE_VERSION }}
                  cache: pnpm

            - name: Install NPM dependencies
              run: make install-ci

            - name: Build TypeScript
              run: make build-ci

            - name: Run tests
              run: make test-ci

            - name: Format & lint
              run: make lint-ci

    docker:
        needs: [check]
        runs-on: ubuntu-22.04
        permissions:
            packages: write
            contents: read
        steps:
            - name: Checkout
              uses: actions/checkout@v3

            - name: Set up QEMU
              if: contains(env.IMAGE_PLATFORMS, ',')
              uses: docker/setup-qemu-action@v2

            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@v2

            - name: Extract metadata for Docker
              id: docker-meta
              uses: docker/metadata-action@v4
              with:
                  images: |
                      ${{ env.IMAGE_REGISTRY }}/smartlook/relay-proxy
                  tags: |
                      type=ref,event=branch
                      type=ref,event=pr
                      type=semver,pattern={{version}}
                      type=semver,pattern={{major}}.{{minor}}
                      type=semver,pattern={{major}}

            - name: Login to GitHub Container Registry
              uses: docker/login-action@v2
              with:
                  registry: ${{ env.IMAGE_REGISTRY }}
                  username: ${{ github.actor }}
                  password: ${{ secrets.GITHUB_TOKEN }}

            - name: Git metadata
              id: git-meta
              run: |
                  echo "BRANCH_OR_TAG_NORMALIZED_WITH_SHA=$(echo ${{ env.BRANCH_OR_TAG }} | tr '/' '-'),${{ env.COMMIT_SHA }}" >> $GITHUB_OUTPUT

            - name: Build and push image to registry
              uses: docker/build-push-action@v4
              with:
                  context: .
                  push: true
                  provenance: false
                  build-args: |
                      COMMIT_SHA=${{ steps.git-meta.outputs.BRANCH_OR_TAG_NORMALIZED_WITH_SHA }}
                  cache-from: type=gha
                  cache-to: type=gha,mode=max
                  platforms: ${{ env.IMAGE_PLATFORMS }}
                  tags: ${{ steps.docker-meta.outputs.tags }}
                  labels: ${{ steps.docker-meta.outputs.labels }}