ci-backend.test.yml

# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions

name: Backend CI

on:
  workflow_dispatch:
  push:
    branches:
      - master
      - 'feature/**'
      - 'Feature/**'
      - 'fix/*'
      - 'Fix/*'
    paths:
      - 'backend/src/**'
      - 'backend/tests/unit/**'
  pull_request:
    branches: [ master ]
    paths:
      - 'backend/src/**'
      - 'backend/tests/unit/**'

jobs:
  test:

    runs-on: ubuntu-latest

    defaults:
      run:
        working-directory: backend

    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-node@v3
        with:
          node-version: '18.x'
      - run: npm ci
      - run: npm run lint
      - run: npm test
        env:
          NODE_ENV: 'test'
      - name: Run Trivy vulnerability scanner in repo mode
        uses: aquasecurity/trivy-action@master
        with:
          scan-type: 'fs'
          ignore-unfixed: true
          format: 'template'
          template: '@/contrib/sarif.tpl'
          output: 'trivy-results.sarif'
          severity: 'CRITICAL'

      - name: Upload Trivy scan results to GitHub Security tab
        uses: github/codeql-action/upload-sarif@v2
        with:
          sarif_file: 'trivy-results.sarif'
          ##- name: SonarCloud Scan
          ##uses: sonarsource/sonarcloud-github-action@master
          ##with:
          ##projectBaseDir: backend
          ##env:
          ##GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          ##SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}