test.yml

name: Testing

on:
  push:
    branches: [ "main" ]
  pull_request:
    branches: [ "main" ]
  workflow_dispatch:

permissions:  # added using https://github.com/step-security/secure-workflows
  contents: read

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
    - name: Harden Runner
      uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
      with:
        egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs

    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

    - name: Set up JDK 8
      uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93 # v4.0.0
      with:
        java-version: '8'
        distribution: 'temurin'
        cache: maven

    - name: Set up Node
      uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
      with:
        node-version: '14.15.1'
        cache: 'yarn'
        cache-dependency-path: report/report-ng/yarn.lock

    - name: Build with Maven
      run: mvn -B -Dnode=system package

    - name: Save flow execution reports
      uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
      with:
        name: flow_execution_reports
        path: 'example/**/target/mctf/latest'

    - name: Save angular coverage reports
      uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
      with:
        name: angular_coverage
        path: 'report/report-ng/coverage'

  publish:
    permissions:
      contents: write  # for stefanzweifel/git-auto-commit-action to push code in repo
    needs: build
    runs-on: ubuntu-latest
    continue-on-error: true
    concurrency: pages_branch
    steps:
    - name: Harden Runner
      uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
      with:
        egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs

    - name: Checkout
      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      with:
        ref: pages

    - name: Download flow reports
      uses: actions/download-artifact@7a1cd3216ca9260cd8022db641d960b1db4d1be4 # v4.0.0
      with:
        name: flow_execution_reports
        path: execution/ingest

    - name: Download angular coverage
      uses: actions/download-artifact@7a1cd3216ca9260cd8022db641d960b1db4d1be4 # v4.0.0
      with:
        name: angular_coverage
        path: ng_coverage/ingest

    - name: Ingest
      run: perl regen_index.pl $GITHUB_HEAD_REF >> $GITHUB_STEP_SUMMARY

    - name: Commit
      uses: stefanzweifel/git-auto-commit-action@8756aa072ef5b4a080af5dc8fef36c5d586e521d # v5.0.0
      with:
        branch: pages