build(ci): add dependency review step

[e-mobility-charging-stations-simulator.git] / .github / workflows / ci.yml

name: CI
on:
  push:
    branches: [main]
  pull_request:
    types: [opened, synchronize, reopened]
  merge_group:
    branches: [main]
jobs:
  build:
    strategy:
      matrix:
        os: [windows-latest, macos-latest, ubuntu-latest]
        node: ['16.x', '18.x', '20.x']
    name: Build simulator with Node ${{ matrix.node }} on ${{ matrix.os }}
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
      - name: 'Dependency Review'
        uses: actions/dependency-review-action@v3
      - uses: pnpm/action-setup@v2
        with:
          version: 8
      - name: Setup node ${{ matrix.node }}
        uses: actions/setup-node@v3
        with:
          node-version: ${{ matrix.node }}
          cache: 'pnpm'
      - name: pnpm install
        run: pnpm install --ignore-scripts
      - name: pnpm lint
        if: ${{ matrix.os == 'ubuntu-latest' && matrix.node == '18.x' }}
        run: pnpm lint
      - name: pnpm build
        run: pnpm build
      - name: pnpm test
        run: pnpm test
      - name: pnpm coverage
        if: ${{ github.repository == 'sap/e-mobility-charging-stations-simulator' && matrix.os == 'ubuntu-latest' && matrix.node == '18.x' }}
        run: pnpm coverage
      - name: SonarCloud Scan
        if: ${{ github.repository == 'sap/e-mobility-charging-stations-simulator' && matrix.os == 'ubuntu-latest' && matrix.node == '18.x' }}
        uses: sonarsource/sonarcloud-github-action@v2.0.1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
  build-dashboard:
    strategy:
      matrix:
        os: [windows-latest, macos-latest, ubuntu-latest]
        node: ['16.x', '18.x', '20.x']
    name: Build dashboard with Node ${{ matrix.node }} on ${{ matrix.os }}
    runs-on: ${{ matrix.os }}
    defaults:
      run:
        working-directory: ui/web
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
      - name: 'Dependency Review'
        uses: actions/dependency-review-action@v3
      - uses: pnpm/action-setup@v2
        with:
          version: 8
      - name: Setup node ${{ matrix.node }}
        uses: actions/setup-node@v3
        with:
          node-version: ${{ matrix.node }}
          cache: 'pnpm'
      - name: pnpm install
        run: pnpm install --ignore-scripts
      - name: pnpm lint
        if: ${{ matrix.os == 'ubuntu-latest' && matrix.node == '18.x' }}
        run: pnpm lint
      - name: pnpm build
        run: pnpm build
      - name: pnpm test
        run: pnpm test
      - name: pnpm coverage
        if: ${{ github.repository == 'sap/e-mobility-charging-stations-simulator' && matrix.os == 'ubuntu-latest' && matrix.node == '18.x' }}
        run: pnpm coverage
      - name: SonarCloud Scan
        if: ${{ github.repository == 'sap/e-mobility-charging-stations-simulator' && matrix.os == 'ubuntu-latest' && matrix.node == '18.x' }}
        uses: sonarsource/sonarcloud-github-action@v2.0.1
        with:
          projectBaseDir: ui/web
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
  build-docker:
    runs-on: ubuntu-latest
    name: Build docker image
    steps:
      - uses: actions/checkout@v4
      - name: Setup Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v2
      - name: Build docker image
        run: |
          cd docker
          make SUBMODULES_INIT=false