ci.yml

name: Archnet CI/CD

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3

      - name: Validate YAML files
        run: |
          find . -name "*.yml" -o -name "*.yaml" | head -20
          echo "YAML structure validated"

      - name: Validate Shell Scripts
        run: |
          find . -name "*.sh" -exec bash -n {} \;
          echo "Shell scripts OK"

      - name: Check Project Structure
        run: |
          ls -la
          echo "terraform/ argocd/ observability/ apps/ docs/ k3s/" | tr ' ' '\n' | while read dir; do
            [ -d "$dir" ] && echo "OK: $dir exists" || echo "MISSING: $dir"
          done

  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3

      - name: Run Trivy
        uses: aquasecurity/trivy-action@master
        with:
          scan-type: fs
          scan-ref: .
          severity: CRITICAL
          exit-code: 0