Skip to content

Commit 630c9d3

Browse files
premtsd-codepremtsd-code
committed
ci: add GitHub Actions workflows, PR template, dependabot
1 parent ac74db4 commit 630c9d3

8 files changed

Lines changed: 1012 additions & 1515 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: github-actions
4+
directory: /
5+
schedule:
6+
interval: weekly
7+
8+
- package-ecosystem: docker
9+
directory: /
10+
schedule:
11+
interval: weekly
12+
13+
- package-ecosystem: maven
14+
directory: /api-gateway
15+
schedule:
16+
interval: weekly
17+
18+
- package-ecosystem: maven
19+
directory: /user-service
20+
schedule:
21+
interval: weekly
22+
23+
- package-ecosystem: maven
24+
directory: /post-service
25+
schedule:
26+
interval: weekly
27+
28+
- package-ecosystem: maven
29+
directory: /connections-service
30+
schedule:
31+
interval: weekly
32+
33+
- package-ecosystem: maven
34+
directory: /notification-service
35+
schedule:
36+
interval: weekly
37+
38+
- package-ecosystem: maven
39+
directory: /uploader-service
40+
schedule:
41+
interval: weekly

‎.github/pull_request_template.md‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
## Description
2+
<!-- What does this PR do? -->
3+
4+
## Type of change
5+
- [ ] Bug fix
6+
- [ ] New feature
7+
- [ ] Breaking change
8+
- [ ] Documentation update
9+
10+
## Services affected
11+
- [ ] api-gateway
12+
- [ ] user-service
13+
- [ ] post-service
14+
- [ ] connections-service
15+
- [ ] notification-service
16+
- [ ] uploader-service
17+
- [ ] config-server
18+
- [ ] discovery-server
19+
20+
## Testing done
21+
- [ ] Unit tests added/updated
22+
- [ ] Integration tests added/updated
23+
- [ ] Manually tested on DEV
24+
25+
## Checklist
26+
- [ ] Tests pass locally
27+
- [ ] Coverage above 70%
28+
- [ ] No hardcoded credentials
29+
- [ ] Flyway migration added if schema changed
30+
- [ ] Swagger annotations added for new endpoints

‎.github/workflows/develop-ci-cd.yml‎

Lines changed: 122 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,122 @@
1+
name: Develop CI/CD
2+
3+
on:
4+
push:
5+
branches: [develop]
6+
7+
jobs:
8+
9+
detect-changes:
10+
name: Detect Changed Services
11+
runs-on: ubuntu-latest
12+
outputs:
13+
api-gateway: ${{ steps.changes.outputs.api-gateway }}
14+
user-service: ${{ steps.changes.outputs.user-service }}
15+
post-service: ${{ steps.changes.outputs.post-service }}
16+
connections-service: ${{ steps.changes.outputs.connections-service }}
17+
notification-service: ${{ steps.changes.outputs.notification-service }}
18+
uploader-service: ${{ steps.changes.outputs.uploader-service }}
19+
config-server: ${{ steps.changes.outputs.config-server }}
20+
discovery-server: ${{ steps.changes.outputs.discovery-server }}
21+
steps:
22+
- uses: actions/checkout@v4
23+
- uses: dorny/paths-filter@v3
24+
id: changes
25+
with:
26+
filters: |
27+
api-gateway:
28+
- 'api-gateway/**'
29+
user-service:
30+
- 'user-service/**'
31+
post-service:
32+
- 'post-service/**'
33+
connections-service:
34+
- 'connections-service/**'
35+
notification-service:
36+
- 'notification-service/**'
37+
uploader-service:
38+
- 'uploader-service/**'
39+
config-server:
40+
- 'config-server/**'
41+
discovery-server:
42+
- 'discovery-server/**'
43+
44+
build-and-push:
45+
name: Build and Push Images
46+
runs-on: ubuntu-latest
47+
needs: detect-changes
48+
strategy:
49+
matrix:
50+
service:
51+
- { name: api-gateway, changed: "${{ needs.detect-changes.outputs.api-gateway }}" }
52+
- { name: user-service, changed: "${{ needs.detect-changes.outputs.user-service }}" }
53+
- { name: post-service, changed: "${{ needs.detect-changes.outputs.post-service }}" }
54+
- { name: connections-service, changed: "${{ needs.detect-changes.outputs.connections-service }}" }
55+
- { name: notification-service, changed: "${{ needs.detect-changes.outputs.notification-service }}" }
56+
- { name: uploader-service, changed: "${{ needs.detect-changes.outputs.uploader-service }}" }
57+
- { name: config-server, changed: "${{ needs.detect-changes.outputs.config-server }}" }
58+
- { name: discovery-server, changed: "${{ needs.detect-changes.outputs.discovery-server }}" }
59+
steps:
60+
- uses: actions/checkout@v4
61+
if: matrix.service.changed == 'true'
62+
- name: Set up JDK 17
63+
if: matrix.service.changed == 'true'
64+
uses: actions/setup-java@v4
65+
with:
66+
java-version: '17'
67+
distribution: 'corretto'
68+
cache: maven
69+
- name: Build service
70+
if: matrix.service.changed == 'true'
71+
run: cd ${{ matrix.service.name }} && mvn package -DskipTests
72+
- name: Login to DockerHub
73+
if: matrix.service.changed == 'true'
74+
uses: docker/login-action@v3
75+
with:
76+
username: ${{ secrets.DOCKER_USER }}
77+
password: ${{ secrets.DOCKER_PASS }}
78+
- name: Build and push image
79+
if: matrix.service.changed == 'true'
80+
uses: docker/build-push-action@v5
81+
with:
82+
context: ./${{ matrix.service.name }}
83+
platforms: linux/amd64
84+
push: true
85+
tags: |
86+
premtsd18/${{ matrix.service.name }}:develop
87+
premtsd18/${{ matrix.service.name }}:develop-${{ github.sha }}
88+
89+
deploy-dev:
90+
name: Deploy to DEV
91+
runs-on: ubuntu-latest
92+
needs: build-and-push
93+
environment: development
94+
steps:
95+
- name: Deploy to Hetzner DEV
96+
uses: appleboy/ssh-action@master
97+
with:
98+
host: ${{ secrets.HETZNER_IP }}
99+
username: ${{ secrets.HETZNER_USER }}
100+
key: ${{ secrets.HETZNER_SSH_KEY }}
101+
script: |
102+
cd ~/personal/linkedin
103+
git pull origin develop
104+
docker compose pull
105+
docker compose up -d --remove-orphans
106+
docker image prune -f
107+
- name: Health check
108+
run: |
109+
sleep 30
110+
curl -f http://${{ secrets.HETZNER_IP }}:10000/actuator/health
111+
echo "DEV deployment successful ✅"
112+
- name: Rollback on failure
113+
if: failure()
114+
uses: appleboy/ssh-action@master
115+
with:
116+
host: ${{ secrets.HETZNER_IP }}
117+
username: ${{ secrets.HETZNER_USER }}
118+
key: ${{ secrets.HETZNER_SSH_KEY }}
119+
script: |
120+
cd ~/personal/linkedin
121+
docker compose up -d
122+
echo "Rolled back ✅"

‎.github/workflows/pr-checks.yml‎

Lines changed: 123 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,123 @@
1+
name: PR Checks
2+
3+
on:
4+
pull_request:
5+
branches: [develop, main]
6+
7+
jobs:
8+
9+
detect-changes:
10+
name: Detect Changed Services
11+
runs-on: ubuntu-latest
12+
outputs:
13+
api-gateway: ${{ steps.changes.outputs.api-gateway }}
14+
user-service: ${{ steps.changes.outputs.user-service }}
15+
post-service: ${{ steps.changes.outputs.post-service }}
16+
connections-service: ${{ steps.changes.outputs.connections-service }}
17+
notification-service: ${{ steps.changes.outputs.notification-service }}
18+
uploader-service: ${{ steps.changes.outputs.uploader-service }}
19+
config-server: ${{ steps.changes.outputs.config-server }}
20+
discovery-server: ${{ steps.changes.outputs.discovery-server }}
21+
steps:
22+
- uses: actions/checkout@v4
23+
- uses: dorny/paths-filter@v3
24+
id: changes
25+
with:
26+
filters: |
27+
api-gateway:
28+
- 'api-gateway/**'
29+
user-service:
30+
- 'user-service/**'
31+
post-service:
32+
- 'post-service/**'
33+
connections-service:
34+
- 'connections-service/**'
35+
notification-service:
36+
- 'notification-service/**'
37+
uploader-service:
38+
- 'uploader-service/**'
39+
config-server:
40+
- 'config-server/**'
41+
discovery-server:
42+
- 'discovery-server/**'
43+
44+
unit-tests:
45+
name: Unit Tests
46+
runs-on: ubuntu-latest
47+
steps:
48+
- uses: actions/checkout@v4
49+
- name: Set up JDK 17
50+
uses: actions/setup-java@v4
51+
with:
52+
java-version: '17'
53+
distribution: 'corretto'
54+
cache: maven
55+
- name: Run unit tests
56+
run: mvn test -DskipIntegrationTests=true
57+
- name: Upload test results
58+
uses: actions/upload-artifact@v4
59+
if: always()
60+
with:
61+
name: unit-test-results
62+
path: '**/target/surefire-reports/*.xml'
63+
64+
code-coverage:
65+
name: Code Coverage
66+
runs-on: ubuntu-latest
67+
needs: unit-tests
68+
steps:
69+
- uses: actions/checkout@v4
70+
- name: Set up JDK 17
71+
uses: actions/setup-java@v4
72+
with:
73+
java-version: '17'
74+
distribution: 'corretto'
75+
cache: maven
76+
- name: Run tests with coverage
77+
run: mvn verify jacoco:report -DskipIntegrationTests=true
78+
- name: Upload coverage report
79+
uses: actions/upload-artifact@v4
80+
with:
81+
name: coverage-report
82+
path: '**/target/site/jacoco/'
83+
84+
security-scan:
85+
name: Security Scan
86+
runs-on: ubuntu-latest
87+
steps:
88+
- uses: actions/checkout@v4
89+
- name: Set up JDK 17
90+
uses: actions/setup-java@v4
91+
with:
92+
java-version: '17'
93+
distribution: 'corretto'
94+
cache: maven
95+
- name: OWASP Dependency Check
96+
run: mvn dependency-check:check -DfailBuildOnCVSS=7 -DskipTestScope=true
97+
continue-on-error: true
98+
- name: Upload OWASP report
99+
uses: actions/upload-artifact@v4
100+
if: always()
101+
with:
102+
name: owasp-report
103+
path: '**/target/dependency-check-report.html'
104+
105+
code-quality:
106+
name: Code Quality
107+
runs-on: ubuntu-latest
108+
steps:
109+
- uses: actions/checkout@v4
110+
with:
111+
fetch-depth: 0
112+
- name: Set up JDK 17
113+
uses: actions/setup-java@v4
114+
with:
115+
java-version: '17'
116+
distribution: 'corretto'
117+
cache: maven
118+
- name: Checkstyle
119+
run: mvn checkstyle:check
120+
continue-on-error: true
121+
- name: SpotBugs
122+
run: mvn spotbugs:check
123+
continue-on-error: true

0 commit comments

Comments
 (0)