GitHub Actions周りの整備

.github/actions/build-api/action.yml

@@ -0,0 +1,19 @@
+inputs:
+  tags:
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Setup docker
+      uses: ./.github/actions/setup-docker
+
+    - name: Build and push API container
+      uses: docker/build-push-action@v6
+      with:
+        context: ./api
+        file: ./api/Dockerfile
+        push: true
+        tags: ${{ inputs.tags }}
+        cache-from: type=gha
+        cache-to: type=gha,mode=max

.github/actions/build-ui/action.yml

@@ -0,0 +1,19 @@
+inputs:
+  tags:
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Setup docker
+      uses: ./.github/actions/setup-docker
+
+    - name: Build and push UI container
+      uses: docker/build-push-action@v6
+      with:
+        context: ./ui
+        file: ./ui/Dockerfile
+        push: true
+        tags: ${{ inputs.tags }}
+        cache-from: type=gha
+        cache-to: type=gha,mode=max

.github/actions/setup-api/action.yml

@@ -0,0 +1,9 @@
+runs:
+  using: composite
+  steps:
+    - uses: ruby/setup-ruby@v1
+      with:
+        ruby-version: 3.2.2
+    - working-directory: ./api
+      shell: bash
+      run: bundle install

.github/actions/setup-docker/action.yml

@@ -0,0 +1,17 @@
+runs:
+  using: composite
+  steps:
+    # Setup docker buildx
+    - uses: docker/setup-buildx-action@v3
+
+    # To deploy to Artifact Registry, authenticate with workload identity federation
+    - uses: google-github-actions/auth@v2
+      with:
+        workload_identity_provider: "projects/907031882243/locations/global/workloadIdentityPools/github/providers/github"
+        service_account: "github-actions-score-server-ci@networkcontest.iam.gserviceaccount.com"
+
+    # Add credential files to deploy to Artifact Registry
+    - uses: google-github-actions/setup-gcloud@v2
+    - name: Authenticate Docker with gcloud
+      shell: bash
+      run: gcloud auth configure-docker asia-northeast1-docker.pkg.dev -q

.github/actions/setup-ui/action.yml

@@ -0,0 +1,14 @@
+runs:
+  using: composite
+  steps:
+    # To build fibers, we need to install C environment
+    - name: Install dependencies
+      shell: bash
+      run: sudo apt install -y build-essential g++
+
+    - uses: actions/setup-node@v4
+      with:
+        node-version: 23.3.0
+    - working-directory: ./ui
+      shell: bash
+      run: yarn install

.github/workflows/pull_request.yml

@@ -0,0 +1,65 @@
+name: Lint
+on: [pull_request]
+
+jobs:
+  lint-api-rubocop:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - name: Setup actions environment for API
+      uses: ./.github/actions/setup-api
+    - working-directory: ./api
+      run: bundle exec rubocop
+
+  lint-api-brakeman:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - name: Setup actions environment for API
+      uses: ./.github/actions/setup-api
+    - working-directory: ./api
+      run: bundle exec brakeman
+
+  lint-api-bundle-audit:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - name: Setup actions environment for API
+      uses: ./.github/actions/setup-api
+    - working-directory: ./api
+      run: bundle exec bundle-audit check --update
+
+  lint-ui-yarn:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - name: Setup actions environment for UI
+      uses: ./.github/actions/setup-ui
+    - working-directory: ./ui
+      run: yarn lint
+
+  build-api:
+    needs: [lint-api-rubocop, lint-api-brakeman, lint-api-bundle-audit]
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    steps:
+    - uses: actions/checkout@v4
+    - name: Deploy API container
+      uses: ./.github/actions/build-api
+      with:
+        tags: |
+          asia-northeast1-docker.pkg.dev/networkcontest/janog55/network-score-server-api:commit-${{ github.sha }}
+
+  build-ui:
+    needs: [lint-ui-yarn]
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    steps:
+    - uses: actions/checkout@v4
+    - name: Deploy UI container
+      uses: ./.github/actions/build-ui
+      with:
+        tags: |
+          asia-northeast1-docker.pkg.dev/networkcontest/janog55/network-score-server-ui:commit-${{ github.sha }}

api/.rubocop.yml

@@ -1,6 +1,6 @@
 AllCops:
   NewCops: enable
-  TargetRubyVersion: 2.7
+  TargetRubyVersion: 3.2
   Exclude:
     - 'bin/**/*'
     - 'tmp/**/*'

api/Gemfile

@@ -5,7 +5,7 @@ git_source(:github) {|repo| "https://github.com/#{repo}.git" }
 
 ruby '3.2.2'
 
-gem 'rails', '~> 6.1'
+gem 'rails', '~> 7.0'
 gem 'pg', '>= 0.18', '< 2.0'
 gem 'puma', '~> 5.0'
 gem 'colorize'