GitHub Actions Workflows

This directory contains GitHub Actions workflows for automated testing, security auditing, and production preparation.

Workflows

🚀 Prep for Production (prepforprod.yml)

Triggers: Push to main/develop, Pull Requests to main/develop

Comprehensive production preparation suite that runs:

• PHP Linting (Pint)
• JavaScript Linting (ESLint)
• JavaScript Formatting Check (Prettier)
• PHP Tests (Pest)
• JavaScript Tests (Vitest)
• Browser Tests (Dusk)
• Filament Tests
• Security Audit
• Production Build Test

🧪 PHP Tests (php-tests.yml)

Triggers: Push to main/develop, Pull Requests to main/develop

Runs PHP tests across multiple PHP versions (8.2, 8.3, 8.4):

• PHP Linting (Pint)
• PHP Tests (Pest) with coverage
• Database migrations and seeding

🎨 JavaScript Tests (js-tests.yml)

Triggers: Push to main/develop, Pull Requests to main/develop

Runs JavaScript tests across multiple Node.js versions (18, 20, 22):

• JavaScript Linting (ESLint)
• JavaScript Formatting Check (Prettier)
• JavaScript Tests (Vitest)
• Frontend build

🌐 Browser Tests (dusk.yml)

Triggers: Push to main/develop, Pull Requests to main/develop

Runs Laravel Dusk browser tests:

• Chrome and ChromeDriver setup
• Database setup
• Frontend build
• Dusk test execution
• Screenshot and console log artifacts on failure

🔒 Security Audit (security.yml)

Triggers: Push to main/develop, Pull Requests to main/develop, Weekly schedule

Performs security audits:

• PHP security vulnerabilities (Composer)
• NPM security vulnerabilities
• Outdated dependencies check
• Unused dependencies check
• Configuration validation

Local Development

Running Prep for Production Locally

# Using Composer
composer run prepforprod

# Using NPM
npm run prepforprod

# Using Make
make prepforprod

Individual Test Commands

# PHP Tests
php artisan test
vendor/bin/pint --test

# JavaScript Tests
npm run test
npm run lint
npm run format:check

# Browser Tests
php artisan dusk

# Build
npm run build

Environment Setup

The workflows automatically:

1. Install PHP 8.4 with required extensions
2. Install Node.js 20
3. Install Composer and NPM dependencies
4. Set up SQLite database for testing
5. Run migrations and seeders
6. Build frontend assets

Artifacts

Failed workflows upload:

• Test results and logs
• Screenshots (Dusk tests)
• Console logs (Dusk tests)
• Coverage reports (PHP tests)
• Build artifacts (JavaScript)

PR Comments

Workflows automatically comment on Pull Requests with:

• Test results summary
• Security audit results
• Next steps recommendations

Monitoring

• All workflows run on every push to main and develop
• Pull requests are automatically tested
• Security audits run weekly
• Failed workflows notify via GitHub notifications