Cliff Hill
6df52238de
Some checks failed
Tests / Build and Push CICD Base Image (push) Successful in 46m24s
Tests / Build and Push CICD Complete Image (push) Failing after 1m6s
Tests / TOML Syntax Check (push) Has been skipped
Tests / Mixed Line Ending Check (push) Has been skipped
Tests / TOML Formatting Check (push) Has been skipped
Tests / Ruff Linting (push) Has been skipped
Tests / Ruff Format Check (push) Has been skipped
Tests / Pyright Type Check (push) Has been skipped
Tests / Darglint Docstring Check (push) Has been skipped
Tests / No Docstring Types Check (push) Has been skipped
Tests / ESLint Check (push) Has been skipped
Tests / Prettier Format Check (push) Has been skipped
Tests / TypeScript Type Check (push) Has been skipped
Tests / TSDoc Lint Check (push) Has been skipped
Tests / Trailing Whitespace Check (push) Has been skipped
Tests / End of File Check (push) Has been skipped
Tests / YAML Syntax Check (push) Has been skipped
Tests / End-to-End Tests (push) Has been skipped
Tests / Backend Tests (push) Has been skipped
Tests / Frontend Tests (push) Has been skipped
Tests / Backend Doctests (push) Has been skipped
Tests / Integration Tests (push) Has been skipped
Signed-off-by: Cliff Hill <xlorep@darkhelm.org>
501 lines
21 KiB
YAML
501 lines
21 KiB
YAML
name: Tests
|
||
|
||
on:
|
||
push:
|
||
branches: [ main, develop, feature/* ]
|
||
pull_request:
|
||
branches: [ main, develop ]
|
||
|
||
jobs:
|
||
setup-base:
|
||
name: Build and Push CICD Base Image
|
||
runs-on: ubuntu-act
|
||
|
||
steps:
|
||
- name: Minimal checkout for base Dockerfile
|
||
env:
|
||
SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
|
||
run: |
|
||
echo "=== Minimal Repository Checkout for Base Dockerfile ==="
|
||
|
||
# Set up SSH key securely (temporary file approach)
|
||
if [ -n "${SSH_PRIVATE_KEY}" ]; then
|
||
mkdir -p ~/.ssh
|
||
echo "${SSH_PRIVATE_KEY}" > ~/.ssh/id_rsa
|
||
chmod 600 ~/.ssh/id_rsa
|
||
ssh-keyscan -p 2222 dogar.darkhelm.org >> ~/.ssh/known_hosts 2>/dev/null
|
||
fi
|
||
|
||
# Clone just enough to get the Dockerfile
|
||
GIT_SSH_COMMAND="ssh -o StrictHostKeyChecking=no" \
|
||
git clone --depth 1 --no-checkout \
|
||
ssh://git@dogar.darkhelm.org:2222/DarkHelm.org/plex-playlist.git .
|
||
|
||
# Checkout only the base Dockerfile and dockerignore
|
||
git checkout HEAD -- Dockerfile.cicd-base .dockerignore
|
||
|
||
# Clean up SSH key for security
|
||
rm -f ~/.ssh/id_rsa
|
||
|
||
echo "✓ Dockerfile.cicd-base ready for build"
|
||
|
||
- name: Check if base image needs rebuilding
|
||
id: check-base
|
||
env:
|
||
PACKAGE_ACCESS_TOKEN: ${{ secrets.PACKAGE_ACCESS_TOKEN }}
|
||
REGISTRY_USER: ${{ secrets.REGISTRY_USER || github.actor }}
|
||
run: |
|
||
echo "=== Checking if CICD Base Image Needs Rebuilding ==="
|
||
|
||
# Login to registry to check for existing image
|
||
echo "${PACKAGE_ACCESS_TOKEN}" | docker login dogar.darkhelm.org -u "${REGISTRY_USER}" --password-stdin
|
||
|
||
# Calculate hash of base Dockerfile for cache key
|
||
BASE_HASH=$(sha256sum Dockerfile.cicd-base | cut -d' ' -f1 | head -c16)
|
||
echo "Base Dockerfile hash: ${BASE_HASH}"
|
||
echo "base_hash=${BASE_HASH}" >> $GITHUB_OUTPUT
|
||
|
||
# Try to pull existing base image with this hash
|
||
if docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd-base:${BASE_HASH} 2>/dev/null; then
|
||
echo "✓ Base image with hash ${BASE_HASH} already exists, skipping build"
|
||
echo "needs_build=false" >> $GITHUB_OUTPUT
|
||
# Tag it as latest for the dependent job
|
||
docker tag dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd-base:${BASE_HASH} \
|
||
dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd-base:latest
|
||
docker push dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd-base:latest
|
||
else
|
||
echo "Base image with hash ${BASE_HASH} not found, will build new image"
|
||
echo "needs_build=true" >> $GITHUB_OUTPUT
|
||
fi
|
||
|
||
- name: Build and push base image
|
||
if: steps.check-base.outputs.needs_build == 'true'
|
||
env:
|
||
PACKAGE_ACCESS_TOKEN: ${{ secrets.PACKAGE_ACCESS_TOKEN }}
|
||
REGISTRY_USER: ${{ secrets.REGISTRY_USER || github.actor }}
|
||
BASE_HASH: ${{ steps.check-base.outputs.base_hash }}
|
||
run: |
|
||
echo "=== Building CICD Base Image ==="
|
||
|
||
# Enable Docker BuildKit
|
||
export DOCKER_BUILDKIT=1
|
||
|
||
# Build base image (no secrets needed for base dependencies)
|
||
docker build -f Dockerfile.cicd-base \
|
||
--build-arg BASE_IMAGE_VERSION="v1.0.0-${BASE_HASH}" \
|
||
-t cicd-base:latest .
|
||
|
||
# Tag for registry with hash and latest
|
||
docker tag cicd-base:latest dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd-base:${BASE_HASH}
|
||
docker tag cicd-base:latest dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd-base:latest
|
||
|
||
# Push to registry
|
||
echo "Pushing base images to registry..."
|
||
docker push dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd-base:${BASE_HASH}
|
||
docker push dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd-base:latest
|
||
|
||
echo "✓ CICD base image built and pushed with hash ${BASE_HASH}"
|
||
|
||
setup:
|
||
name: Build and Push CICD Complete Image
|
||
runs-on: ubuntu-act
|
||
needs: setup-base
|
||
|
||
steps:
|
||
- name: Minimal checkout for Dockerfile
|
||
env:
|
||
SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
|
||
run: |
|
||
echo "=== Minimal Repository Checkout for Complete Dockerfile ==="
|
||
|
||
# Set up SSH key securely (temporary file approach)
|
||
if [ -n "${SSH_PRIVATE_KEY}" ]; then
|
||
mkdir -p ~/.ssh
|
||
echo "${SSH_PRIVATE_KEY}" > ~/.ssh/id_rsa
|
||
chmod 600 ~/.ssh/id_rsa
|
||
ssh-keyscan -p 2222 dogar.darkhelm.org >> ~/.ssh/known_hosts 2>/dev/null
|
||
fi
|
||
|
||
# Clone just enough to get the Dockerfile
|
||
GIT_SSH_COMMAND="ssh -o StrictHostKeyChecking=no" \
|
||
git clone --depth 1 --no-checkout \
|
||
ssh://git@dogar.darkhelm.org:2222/DarkHelm.org/plex-playlist.git .
|
||
|
||
# Checkout only the Dockerfile and dockerignore
|
||
git checkout HEAD -- Dockerfile.cicd .dockerignore
|
||
|
||
# Clean up SSH key for security
|
||
rm -f ~/.ssh/id_rsa
|
||
|
||
echo "✓ Dockerfile.cicd ready for secure build"
|
||
|
||
- name: Build and push complete CICD image
|
||
env:
|
||
PACKAGE_ACCESS_TOKEN: ${{ secrets.PACKAGE_ACCESS_TOKEN }}
|
||
SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
|
||
GITHUB_SHA: ${{ github.sha }}
|
||
REGISTRY_USER: ${{ secrets.REGISTRY_USER || github.actor }}
|
||
run: |
|
||
echo "=== Building Complete CICD Image with Secure Secrets ==="
|
||
|
||
# Login to registry
|
||
echo "${PACKAGE_ACCESS_TOKEN}" | docker login dogar.darkhelm.org -u "${REGISTRY_USER}" --password-stdin
|
||
|
||
# Create temporary SSH key file for BuildKit secrets
|
||
echo "${SSH_PRIVATE_KEY}" > /tmp/ssh_key
|
||
chmod 600 /tmp/ssh_key
|
||
|
||
# Enable Docker BuildKit for secrets support
|
||
export DOCKER_BUILDKIT=1
|
||
|
||
# Build complete CICD image using secure BuildKit secrets, inheriting from base
|
||
# SSH key is mounted securely and never stored in image layers
|
||
docker build -f Dockerfile.cicd \
|
||
--secret id=ssh_private_key,src=/tmp/ssh_key \
|
||
--build-arg GITHUB_SHA="$GITHUB_SHA" \
|
||
--build-arg CICD_BASE_IMAGE="dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd-base:latest" \
|
||
-t cicd:latest .
|
||
|
||
# Clean up temporary SSH key file
|
||
rm -f /tmp/ssh_key
|
||
|
||
# Tag for Gitea container registry
|
||
docker tag cicd:latest dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:latest
|
||
docker tag cicd:latest dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
|
||
# Push to registry
|
||
echo "Pushing complete CICD images to registry..."
|
||
docker push dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:latest
|
||
docker push dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
|
||
echo "✓ Complete CICD image built and pushed to registry"
|
||
|
||
# Pre-commit style checks - General file formatting
|
||
trailing-whitespace:
|
||
name: Trailing Whitespace Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Check trailing whitespace with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run trailing-whitespace --all-files --show-diff-on-failure
|
||
"
|
||
|
||
end-of-file-fixer:
|
||
name: End of File Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Check end of file with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run end-of-file-fixer --all-files --show-diff-on-failure
|
||
"
|
||
|
||
check-yaml:
|
||
name: YAML Syntax Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Check YAML files with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run check-yaml --all-files --show-diff-on-failure
|
||
"
|
||
|
||
check-toml:
|
||
name: TOML Syntax Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Check TOML files with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run check-toml --all-files --show-diff-on-failure
|
||
"
|
||
|
||
mixed-line-ending:
|
||
name: Mixed Line Ending Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Check line endings with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run mixed-line-ending --all-files --show-diff-on-failure
|
||
"
|
||
|
||
toml-lint:
|
||
name: TOML Formatting Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Check TOML formatting with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run pretty-format-toml --all-files --show-diff-on-failure
|
||
"
|
||
|
||
# Backend Python checks
|
||
ruff-lint:
|
||
name: Ruff Linting
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run ruff linting with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run ruff --all-files --show-diff-on-failure
|
||
"
|
||
|
||
ruff-format:
|
||
name: Ruff Format Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Check ruff formatting with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run ruff-format --all-files --show-diff-on-failure
|
||
"
|
||
|
||
pyright:
|
||
name: Pyright Type Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run pyright type checking with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run pyright --all-files --show-diff-on-failure
|
||
"
|
||
|
||
darglint:
|
||
name: Darglint Docstring Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run darglint docstring linting with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run darglint --all-files --show-diff-on-failure
|
||
"
|
||
|
||
no-docstring-types:
|
||
name: No Docstring Types Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run no docstring types check with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run no-docstring-types --all-files --show-diff-on-failure
|
||
"
|
||
|
||
# Frontend checks
|
||
eslint:
|
||
name: ESLint Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run ESLint with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run eslint --all-files --show-diff-on-failure
|
||
"
|
||
|
||
prettier:
|
||
name: Prettier Format Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Check Prettier formatting with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run prettier --all-files --show-diff-on-failure
|
||
"
|
||
|
||
typescript-check:
|
||
name: TypeScript Type Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run TypeScript type checking with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run typescript-check --all-files --show-diff-on-failure
|
||
"
|
||
|
||
tsdoc-lint:
|
||
name: TSDoc Lint Check
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run TSDoc linting with pre-commit
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace &&
|
||
pre-commit run tsdoc-lint --all-files --show-diff-on-failure
|
||
"
|
||
|
||
# Unit tests with coverage
|
||
backend-tests:
|
||
name: Backend Tests
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run backend tests with coverage
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace/backend &&
|
||
source .venv/bin/activate &&
|
||
uv run pytest -v --tb=short --cov=src --cov-report=term-missing --cov-fail-under=95
|
||
"
|
||
|
||
frontend-tests:
|
||
name: Frontend Tests
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run frontend tests with coverage
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace/frontend &&
|
||
yarn test:coverage --run --reporter=verbose --coverage.reporter=text --coverage.reporter=text-summary --coverage.thresholds.lines=85 --coverage.thresholds.functions=85 --coverage.thresholds.branches=85 --coverage.thresholds.statements=85
|
||
"
|
||
|
||
# Doctest for backend
|
||
xdoctest:
|
||
name: Backend Doctests
|
||
runs-on: ubuntu-act
|
||
needs: setup
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run backend doctests
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace/backend &&
|
||
source .venv/bin/activate &&
|
||
echo 'Running doctests...' &&
|
||
if uv run xdoctest src/ --quiet; then
|
||
echo '✓ All doctests passed'
|
||
else
|
||
echo 'ℹ No doctests found or some doctests failed'
|
||
# Don't fail the build for missing doctests, only for failed ones
|
||
if uv run xdoctest src/ --quiet --verbose 2>&1 | grep -q 'FAILED'; then
|
||
exit 1
|
||
fi
|
||
fi
|
||
"
|
||
|
||
# Integration and E2E tests (run after unit tests complete)
|
||
integration-tests:
|
||
name: Integration Tests
|
||
runs-on: ubuntu-act
|
||
needs: [backend-tests, frontend-tests]
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run integration tests
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace/backend &&
|
||
source .venv/bin/activate &&
|
||
if [ -d 'tests/integration' ]; then
|
||
uv run pytest tests/integration/ -v --tb=short
|
||
else
|
||
echo 'ℹ No integration tests found'
|
||
fi
|
||
"
|
||
|
||
e2e-tests:
|
||
name: End-to-End Tests
|
||
runs-on: ubuntu-act
|
||
needs: [backend-tests, frontend-tests]
|
||
steps:
|
||
- name: Login to Gitea Container Registry
|
||
run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login dogar.darkhelm.org -u ${{ github.actor }} --password-stdin
|
||
- name: Run E2E tests
|
||
run: |
|
||
docker pull dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest}
|
||
docker run --rm -e CI=true dogar.darkhelm.org/darkhelm.org/plex-playlist/cicd:${GITHUB_SHA:-latest} bash -c "
|
||
cd /workspace/frontend &&
|
||
if [ -d 'tests/e2e' ] || grep -q 'playwright' package.json; then
|
||
echo 'Running E2E tests with Playwright...' &&
|
||
export CI=true &&
|
||
export NODE_ENV=test &&
|
||
yarn playwright test --reporter=list --headed=false
|
||
else
|
||
echo 'ℹ No E2E tests found'
|
||
fi
|
||
"
|