build.yaml

---
on:
  workflow_call:
    inputs:
      version:
        required: true
        type: string
    secrets:
      SONAR_TOKEN:
        required: true

jobs:
  quality-checks:
    name: Quality Checks
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Run markdown linter
        uses: DavidAnson/markdownlint-cli2-action@v22
        with:
          globs: '**/*.md'

      - name: Run spell checker
        uses: streetsidesoftware/cspell-action@v8
        with:
          files: '**/*.{md,cs}'

      - name: Run YAML linter
        uses: ibiqlik/action-yamllint@v3
        with:
          config_file: .yamllint.yaml

  build:
    name: Build ${{ matrix.os }}
    needs: quality-checks
    permissions:
      contents: read
      pull-requests: write

    strategy:
      matrix:
        os: [windows-latest, ubuntu-latest]

    runs-on: ${{ matrix.os }}

    steps:

      - name: Checkout
        uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Setup dotnet
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: |
            8.x
            9.x
            10.x

      - name: Restore Tools
        run: >
          dotnet tool restore

      - name: Restore Dependencies
        run: >
          dotnet restore

      - name: Start Sonar Scanner
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: >
          dotnet dotnet-sonarscanner
          begin
          /k:"demaconsulting_BuildMark"
          /o:"demaconsulting"
          /d:sonar.token="${{ secrets.SONAR_TOKEN }}"
          /d:sonar.host.url="https://sonarcloud.io"
          /d:sonar.cs.opencover.reportsPaths=**/*.opencover.xml
          /d:sonar.scanner.scanAll=false

      - name: Build
        run: >
          dotnet build
          --no-restore
          --configuration Release
          --property:Version=${{ inputs.version }}

      - name: Test
        run: >
          dotnet test
          --no-build
          --configuration Release
          --property:Version=${{ inputs.version }}
          --collect "XPlat Code Coverage;Format=opencover"
          --logger "trx;LogFilePrefix=${{ matrix.os }}"
          --results-directory test-results

      - name: End Sonar Scanner
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: >
          dotnet dotnet-sonarscanner
          end
          /d:sonar.token="${{ secrets.SONAR_TOKEN }}"

      - name: Create Dotnet Tool
        run: >
          dotnet pack
          --no-build
          --no-restore
          --property:PackageVersion=${{ inputs.version }}

      - name: Upload Test Results
        uses: actions/upload-artifact@v6
        with:
          name: test-results-${{ matrix.os }}
          path: test-results/*.trx

      - name: Upload Artifacts
        uses: actions/upload-artifact@v6
        with:
          name: artifacts-${{ matrix.os }}
          path: |
            src/DemaConsulting.BuildMark/bin/Release/*.nupkg
            src/DemaConsulting.BuildMark/bin/Release/*.snupkg

  codeql:
    name: CodeQL Analysis
    runs-on: ubuntu-latest
    needs: quality-checks
    permissions:
      actions: read
      contents: read
      security-events: write

    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v4
        with:
          languages: csharp
          queries: security-and-quality
          config-file: ./.github/codeql-config.yml

      - name: Setup dotnet
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: |
            8.x
            9.x
            10.x

      - name: Restore Tools
        run: >
          dotnet tool restore

      - name: Restore Dependencies
        run: >
          dotnet restore

      - name: Build
        run: >
          dotnet build
          --no-restore
          --configuration Release
          --property:Version=${{ inputs.version }}

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v4
        with:
          category: "/language:csharp"
          output: sarif-results
          upload: false

      - name: Upload CodeQL SARIF
        uses: actions/upload-artifact@v6
        with:
          name: codeql-sarif
          path: sarif-results/csharp.sarif

  integration-test:
    name: Integration Test ${{ matrix.os }} .NET ${{ matrix.dotnet-version }}
    runs-on: ${{ matrix.os }}
    needs: build
    permissions:
      contents: read

    strategy:
      matrix:
        os: [windows-latest, ubuntu-latest]
        dotnet-version: ['8.x', '9.x', '10.x']

    steps:
      - name: Download package
        uses: actions/download-artifact@v7
        with:
          name: artifacts-${{ matrix.os }}
          path: packages

      - name: Setup dotnet
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: ${{ matrix.dotnet-version }}

      - name: Install tool from package
        shell: bash
        run: |
          echo "Installing package version ${{ inputs.version }} from: packages/"
          dotnet tool install --global \
            --add-source packages \
            --version ${{ inputs.version }} \
            DemaConsulting.BuildMark

      - name: Test version display
        shell: bash
        run: |
          echo "Testing buildmark --version..."
          buildmark --version || { echo "✗ Version command failed"; exit 1; }
          echo "✓ Version command succeeded"

      - name: Test help display
        shell: bash
        run: |
          echo "Testing buildmark --help..."
          buildmark --help || { echo "✗ Help command failed"; exit 1; }
          echo "✓ Help command succeeded"

      - name: Run BuildMark self-validation
        shell: bash
        run: |
          echo "Running BuildMark self-validation..."
          buildmark --validate --results validation-${{ matrix.os }}-dotnet${{ matrix.dotnet-version }}.trx \
            || { echo "✗ Self-validation failed"; exit 1; }
          echo "✓ Self-validation succeeded"

      - name: Upload validation test results
        if: always()
        uses: actions/upload-artifact@v6
        with:
          name: validation-test-results-${{ matrix.os }}-dotnet${{ matrix.dotnet-version }}
          path: validation-${{ matrix.os }}-dotnet${{ matrix.dotnet-version }}.trx

  build-docs:
    name: Build Documents
    runs-on: windows-latest

    needs: [build, integration-test, codeql]

    permissions:
      contents: read

    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Setup dotnet
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: '10.x'

      - name: Restore Tools
        run: dotnet tool restore

      - name: Download BuildMark Package
        uses: actions/download-artifact@v7
        with:
          name: artifacts-windows-latest
          path: packages

      - name: Install BuildMark Tool
        shell: bash
        run: |
          echo "Installing BuildMark version ${{ inputs.version }}"
          dotnet tool install --global \
            --add-source packages \
            --version ${{ inputs.version }} \
            DemaConsulting.BuildMark

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: 'lts/*'

      - name: Install npm dependencies
        run: npm install

      - name: Download all test results
        uses: actions/download-artifact@v7
        with:
          path: test-results
          pattern: '*test-results*'
        continue-on-error: true

      - name: Download CodeQL SARIF
        uses: actions/download-artifact@v7
        with:
          name: codeql-sarif
          path: codeql-results

      - name: Generate Requirements Report and Trace Matrix
        run: >
          dotnet reqstream
          --requirements requirements.yaml
          --tests "test-results/**/*.trx"
          --report docs/requirements/requirements.md
          --matrix docs/tracematrix/tracematrix.md
          --justifications docs/justifications/justifications.md
          --enforce

      - name: Generate CodeQL Quality Report with SarifMark
        run: >
          dotnet sarifmark
          --sarif codeql-results/csharp.sarif
          --report docs/quality/codeql-quality.md
          --heading "BuildMark CodeQL Analysis"
          --report-depth 1

      - name: Display CodeQL Quality Report
        shell: bash
        run: |
          echo "=== CodeQL Quality Report ==="
          cat docs/quality/codeql-quality.md

      - name: Generate Code Quality Report with SonarMark
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        run: >
          dotnet sonarmark
          --server https://sonarcloud.io
          --project-key demaconsulting_BuildMark
          --branch ${{ github.head_ref || github.ref_name }}
          --token "$env:SONAR_TOKEN"
          --report docs/quality/sonar-quality.md
          --report-depth 1

      - name: Display SonarCloud Quality Report
        shell: bash
        run: |
          echo "=== SonarCloud Quality Report ==="
          cat docs/quality/sonar-quality.md

      - name: Generate Build Notes with BuildMark
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        shell: bash
        run: >
          buildmark
          --build-version ${{ inputs.version }}
          --report docs/buildnotes.md
          --report-depth 1

      - name: Display Build Notes Report
        shell: bash
        run: |
          echo "=== Build Notes Report ==="
          cat docs/buildnotes.md

      - name: Generate Build Notes HTML with Pandoc
        shell: bash
        run: >
          dotnet pandoc
          --defaults docs/buildnotes/definition.yaml
          --metadata version="${{ inputs.version }}"
          --metadata date="$(date +'%Y-%m-%d')"
          --filter node_modules/.bin/mermaid-filter.cmd
          --output docs/buildnotes/buildnotes.html

      - name: Convert Build Notes HTML to PDF with Weasyprint
        run: >
          dotnet weasyprint
          docs/buildnotes/buildnotes.html
          "docs/BuildMark Build Notes.pdf"

      - name: Generate User Guide HTML with Pandoc
        shell: bash
        run: >
          dotnet pandoc
          --defaults docs/guide/definition.yaml
          --metadata version="${{ inputs.version }}"
          --metadata date="$(date +'%Y-%m-%d')"
          --filter node_modules/.bin/mermaid-filter.cmd
          --output docs/guide/guide.html

      - name: Convert User Guide HTML to PDF with Weasyprint
        run: >
          dotnet weasyprint
          docs/guide/guide.html
          "docs/BuildMark User Guide.pdf"

      - name: Generate Requirements HTML with Pandoc
        shell: bash
        run: >
          dotnet pandoc
          --defaults docs/requirements/definition.yaml
          --metadata version="${{ inputs.version }}"
          --metadata date="$(date +'%Y-%m-%d')"
          --filter node_modules/.bin/mermaid-filter.cmd
          --output docs/requirements/requirements.html

      - name: Generate Requirements PDF with Weasyprint
        run: >
          dotnet weasyprint
          docs/requirements/requirements.html
          "docs/BuildMark Requirements.pdf"

      - name: Generate Trace Matrix HTML with Pandoc
        shell: bash
        run: >
          dotnet pandoc
          --defaults docs/tracematrix/definition.yaml
          --metadata version="${{ inputs.version }}"
          --metadata date="$(date +'%Y-%m-%d')"
          --filter node_modules/.bin/mermaid-filter.cmd
          --output docs/tracematrix/tracematrix.html

      - name: Generate Trace Matrix PDF with Weasyprint
        run: >
          dotnet weasyprint
          docs/tracematrix/tracematrix.html
          "docs/BuildMark Trace Matrix.pdf"

      - name: Generate Requirements Justifications HTML with Pandoc
        shell: bash
        run: >
          dotnet pandoc
          --defaults docs/justifications/definition.yaml
          --metadata version="${{ inputs.version }}"
          --metadata date="$(date +'%Y-%m-%d')"
          --filter node_modules/.bin/mermaid-filter.cmd
          --output docs/justifications/justifications.html

      - name: Convert Requirements Justifications HTML to PDF with Weasyprint
        run: >
          dotnet weasyprint
          docs/justifications/justifications.html
          "docs/BuildMark Requirements Justifications.pdf"

      - name: Generate Code Quality HTML with Pandoc
        shell: bash
        run: >
          dotnet pandoc
          --defaults docs/quality/definition.yaml
          --metadata version="${{ inputs.version }}"
          --metadata date="$(date +'%Y-%m-%d')"
          --filter node_modules/.bin/mermaid-filter.cmd
          --output docs/quality/quality.html

      - name: Convert Code Quality HTML to PDF with Weasyprint
        run: >
          dotnet weasyprint
          docs/quality/quality.html
          "docs/BuildMark Code Quality.pdf"

      - name: Upload Document Artifacts
        uses: actions/upload-artifact@v6
        with:
          name: documents
          path: |
            docs/*.pdf
            docs/buildnotes.md