build(deps): bump dotnet/sdk from 8.0 to 10.0 in /backend #139
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI/CD Pipeline - Finance System | |
| on: | |
| push: | |
| branches: [ "main", "master", "develop" ] | |
| pull_request: | |
| branches: [ "main", "master" ] | |
| env: | |
| DOTNET_VERSION: '8.0.x' | |
| NODE_VERSION: '18.x' | |
| jobs: | |
| # Backend CI Job | |
| backend-build: | |
| name: 🔧 Backend Build & Test | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: ./backend | |
| steps: | |
| - name: 📥 Checkout code | |
| uses: actions/checkout@v4 | |
| - name: 🛠️ Setup .NET Core | |
| uses: actions/setup-dotnet@v4 | |
| with: | |
| dotnet-version: ${{ env.DOTNET_VERSION }} | |
| - name: 📦 Cache .NET packages | |
| uses: actions/cache@v3 | |
| with: | |
| path: ~/.nuget/packages | |
| key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }} | |
| restore-keys: | | |
| ${{ runner.os }}-nuget- | |
| - name: 🔄 Restore dependencies | |
| run: dotnet restore | |
| - name: 🏗️ Build backend | |
| run: dotnet build --no-restore --configuration Release | |
| - name: 🧪 Run backend tests | |
| run: dotnet test --no-build --configuration Release --verbosity normal --collect:"XPlat Code Coverage" | |
| - name: 📊 Upload coverage reports | |
| uses: codecov/codecov-action@v3 | |
| with: | |
| directory: ./backend/TestResults | |
| fail_ci_if_error: false | |
| # Frontend CI Job | |
| frontend-build: | |
| name: 🎨 Frontend Build & Test | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: ./frontend/project | |
| steps: | |
| - name: 📥 Checkout code | |
| uses: actions/checkout@v4 | |
| - name: 🛠️ Setup Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: ${{ env.NODE_VERSION }} | |
| cache: 'npm' | |
| cache-dependency-path: ./frontend/project/package-lock.json | |
| - name: 📦 Install dependencies | |
| run: npm ci | |
| - name: 🔍 Lint frontend | |
| run: npm run lint --if-present | |
| - name: 🧪 Run frontend tests | |
| run: npm test --if-present | |
| - name: 🏗️ Build frontend | |
| run: npm run build | |
| - name: 📤 Upload build artifacts | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: frontend-build | |
| path: ./frontend/project/dist | |
| # Docker Build & Security | |
| docker-build: | |
| name: 🐳 Docker Build & Security | |
| runs-on: ubuntu-latest | |
| needs: [backend-build, frontend-build] | |
| if: github.event_name == 'push' | |
| steps: | |
| - name: 📥 Checkout code | |
| uses: actions/checkout@v4 | |
| - name: 🛠️ Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: 🏗️ Build backend Docker image | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: ./backend | |
| file: ./backend/Dockerfile | |
| push: false | |
| tags: finace-system-backend:latest | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| - name: 🏗️ Build frontend Docker image | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: ./frontend/project | |
| file: ./frontend/project/Dockerfile | |
| push: false | |
| tags: finace-system-frontend:latest | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| - name: 🔍 Run Trivy vulnerability scanner | |
| uses: aquasecurity/trivy-action@master | |
| with: | |
| image-ref: 'finace-system-backend:latest' | |
| format: 'sarif' | |
| output: 'trivy-results.sarif' | |
| - name: 📊 Upload Trivy scan results | |
| uses: github/codeql-action/upload-sarif@v2 | |
| if: always() | |
| with: | |
| sarif_file: 'trivy-results.sarif' | |
| # Integration Tests with Docker Compose | |
| integration-tests: | |
| name: 🧪 Integration Tests | |
| runs-on: ubuntu-latest | |
| needs: [backend-build, frontend-build] | |
| steps: | |
| - name: 📥 Checkout code | |
| uses: actions/checkout@v4 | |
| - name: 🐳 Start services with Docker Compose | |
| run: | | |
| docker-compose up -d --build | |
| sleep 30 # Wait for services to be ready | |
| - name: 🩺 Health check backend | |
| run: | | |
| curl -f http://localhost:8080/swagger || exit 1 | |
| echo "✅ Backend is healthy" | |
| - name: 🩺 Health check frontend | |
| run: | | |
| curl -f http://localhost:3000 || exit 1 | |
| echo "✅ Frontend is healthy" | |
| - name: 🔍 Test API endpoints | |
| run: | | |
| # Test basic API endpoints | |
| curl -f http://localhost:8080/swagger/v1/swagger.json || exit 1 | |
| echo "✅ Swagger API documentation accessible" | |
| - name: 📋 Show container logs | |
| if: failure() | |
| run: | | |
| echo "=== Backend Logs ===" | |
| docker-compose logs backend | |
| echo "=== Frontend Logs ===" | |
| docker-compose logs frontend | |
| echo "=== MySQL Logs ===" | |
| docker-compose logs mysql | |
| - name: 🛑 Stop services | |
| if: always() | |
| run: docker-compose down | |
| # Notify Success | |
| notify-success: | |
| name: 🎉 Deployment Ready | |
| runs-on: ubuntu-latest | |
| needs: [backend-build, frontend-build, docker-build, integration-tests] | |
| if: success() && github.ref == 'refs/heads/master' | |
| steps: | |
| - name: 🎊 Success notification | |
| run: | | |
| echo "🚀 All tests passed! System is ready for deployment." | |
| echo "✅ Backend: Built and tested" | |
| echo "✅ Frontend: Built and tested" | |
| echo "✅ Docker: Images built successfully" | |
| echo "✅ Integration: All services healthy" |