feat(workflows): add smoke tests to validate API Gateway readiness

Author: RandithaK

.github/workflows/build-test.yml

@@ -70,6 +70,15 @@ jobs:
           vuln-type: 'os,library'
           severity: 'CRITICAL,HIGH' # Only fail on Critical and High issues
 
+      # --- NEW STEP: Run Smoke Tests ---
+      - name: Run Smoke Tests
+        run: |
+          docker run -d --name app -p 8080:8080 local-image-scan:latest
+          sleep 5
+          chmod +x ./scripts/smoke-test.sh
+          ./scripts/smoke-test.sh http://localhost:8080
+          docker stop app && docker rm app
+
       - name: Log in to GHCR
         uses: docker/login-action@v3
         with:

scripts/smoke-test.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+# Configuration
+SERVICE_URL=${1:-"http://localhost:8080"}
+MAX_RETRIES=30
+SLEEP_INTERVAL=2
+
+echo "Starting smoke tests against $SERVICE_URL..."
+
+# Wait for gateway to be ready
+echo "Waiting for gateway to be up..."
+for ((i=1; i<=MAX_RETRIES; i++)); do
+    response=$(curl -s -o /dev/null -w "%{http_code}" "$SERVICE_URL/healthz")
+    if [ "$response" == "200" ]; then
+        echo "✅ API Gateway is UP and healthy!"
+        exit 0
+    fi
+    echo "Attempt $i/$MAX_RETRIES: Gateway not ready yet... waiting ${SLEEP_INTERVAL}s"
+    sleep $SLEEP_INTERVAL
+done
+
+echo "❌ Gateway failed to start within timeout."
+exit 1