workflow.yaml

name: CI/CD Pipeline - Finance System

on:
  push:
    branches: [ "main", "master", "develop" ]
  pull_request:
    branches: [ "main", "master" ]

env:
  DOTNET_VERSION: '8.0.x'
  NODE_VERSION: '18.x'

jobs:
  # Backend CI Job
  backend-build:
    name: 🔧 Backend Build & Test
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./backend

    steps:
      - name: 📥 Checkout code
        uses: actions/checkout@v4

      - name: 🛠️ Setup .NET Core
        uses: actions/setup-dotnet@v4
        with:
          dotnet-version: ${{ env.DOTNET_VERSION }}

      - name: 📦 Cache .NET packages
        uses: actions/cache@v3
        with:
          path: ~/.nuget/packages
          key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }}
          restore-keys: |
            ${{ runner.os }}-nuget-

      - name: 🔄 Restore dependencies
        run: dotnet restore

      - name: 🏗️ Build backend
        run: dotnet build --no-restore --configuration Release

      - name: 🧪 Run backend tests
        run: dotnet test --no-build --configuration Release --verbosity normal --collect:"XPlat Code Coverage"

      - name: 📊 Upload coverage reports
        uses: codecov/codecov-action@v3
        with:
          directory: ./backend/TestResults
          fail_ci_if_error: false

  # Frontend CI Job
  frontend-build:
    name: 🎨 Frontend Build & Test
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./frontend/project

    steps:
      - name: 📥 Checkout code
        uses: actions/checkout@v4

      - name: 🛠️ Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'npm'
          cache-dependency-path: ./frontend/project/package-lock.json

      - name: 📦 Install dependencies
        run: npm ci

      - name: 🔍 Lint frontend
        run: npm run lint --if-present

      - name: 🧪 Run frontend tests
        run: npm test --if-present

      - name: 🏗️ Build frontend
        run: npm run build

      - name: 📤 Upload build artifacts
        uses: actions/upload-artifact@v3
        with:
          name: frontend-build
          path: ./frontend/project/dist

  # Docker Build & Security
  docker-build:
    name: 🐳 Docker Build & Security
    runs-on: ubuntu-latest
    needs: [backend-build, frontend-build]
    if: github.event_name == 'push'

    steps:
      - name: 📥 Checkout code
        uses: actions/checkout@v4

      - name: 🛠️ Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: 🏗️ Build backend Docker image
        uses: docker/build-push-action@v5
        with:
          context: ./backend
          file: ./backend/Dockerfile
          push: false
          tags: finace-system-backend:latest
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: 🏗️ Build frontend Docker image
        uses: docker/build-push-action@v5
        with:
          context: ./frontend/project
          file: ./frontend/project/Dockerfile
          push: false
          tags: finace-system-frontend:latest
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: 🔍 Run Trivy vulnerability scanner
        uses: aquasecurity/trivy-action@master
        with:
          image-ref: 'finace-system-backend:latest'
          format: 'sarif'
          output: 'trivy-results.sarif'

      - name: 📊 Upload Trivy scan results
        uses: github/codeql-action/upload-sarif@v2
        if: always()
        with:
          sarif_file: 'trivy-results.sarif'

  # Integration Tests with Docker Compose
  integration-tests:
    name: 🧪 Integration Tests
    runs-on: ubuntu-latest
    needs: [backend-build, frontend-build]

    steps:
      - name: 📥 Checkout code
        uses: actions/checkout@v4

      - name: 🐳 Start services with Docker Compose
        run: |
          docker-compose up -d --build
          sleep 30  # Wait for services to be ready

      - name: 🩺 Health check backend
        run: |
          curl -f http://localhost:8080/swagger || exit 1
          echo "✅ Backend is healthy"

      - name: 🩺 Health check frontend
        run: |
          curl -f http://localhost:3000 || exit 1
          echo "✅ Frontend is healthy"

      - name: 🔍 Test API endpoints
        run: |
          # Test basic API endpoints
          curl -f http://localhost:8080/swagger/v1/swagger.json || exit 1
          echo "✅ Swagger API documentation accessible"

      - name: 📋 Show container logs
        if: failure()
        run: |
          echo "=== Backend Logs ==="
          docker-compose logs backend
          echo "=== Frontend Logs ==="
          docker-compose logs frontend
          echo "=== MySQL Logs ==="
          docker-compose logs mysql

      - name: 🛑 Stop services
        if: always()
        run: docker-compose down

  # Notify Success
  notify-success:
    name: 🎉 Deployment Ready
    runs-on: ubuntu-latest
    needs: [backend-build, frontend-build, docker-build, integration-tests]
    if: success() && github.ref == 'refs/heads/master'

    steps:
      - name: 🎊 Success notification
        run: |
          echo "🚀 All tests passed! System is ready for deployment."
          echo "✅ Backend: Built and tested"
          echo "✅ Frontend: Built and tested"  
          echo "✅ Docker: Images built successfully"
          echo "✅ Integration: All services healthy"