onpullrequest.yml

name: OnPullRequest

on:
  pull_request:


permissions: read-all

jobs:
 setup:
    runs-on: ubuntu-latest
    outputs:
      runner: ${{ steps.step1.outputs.runner }}
    steps:
      - name: Check repository
        id: step1
        run: |
          if [ "${{ github.repository }}" == 'intel/trustauthority-cli' ]; then
            echo "runner=ubuntu-latest" >> $GITHUB_OUTPUT
          else
            echo "runner=self-hosted" >> $GITHUB_OUTPUT
          fi

 version-check:
    needs: [ setup ]
    runs-on: ${{ needs.setup.outputs.runner }}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: version-check
        run: |
          /bin/bash version-check.sh
          if [[ $? -eq 1 ]]; then
            echo "version check failed"
            exit 1
          fi

 security-file-check:
    needs: [ setup ]
    runs-on: ${{ needs.setup.outputs.runner }}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Check Security.md file
        run: |
          if [ ! -f ./Security.md ]; then
            echo "Security.md file is missing"
            exit 1
          fi
          
 build-test:
    runs-on: ${{ needs.setup.outputs.runner }}
    needs: [ setup, version-check ]
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
        with:
          go-version: '1.26.6'

      - name: Style Checker
        run: |
          if [ $(make go-fmt | tail -n 1 | grep gofmt | wc -l)  -eq 0 ]; then
             exit 0
          fi

      - name: Unit Test Coverage
        run: |
          make test-coverage
          COVERAGE=$(make test-coverage | grep 'total' | awk '{print $3}' | awk -F. '{print $1}')
          echo "Unit test coverage is - $COVERAGE%"
          if [[ $COVERAGE -lt 80 ]]; then
            echo "Unit test coverage must be above 80% "
            exit 1
          fi

      - name: Build Installer
        run: make installer