deploy-pr.yml

name: Test PR

on:
  pull_request:
    types: [opened, synchronize]

jobs:
  build:
    runs-on: ubuntu-latest
    name: build-main-api
    steps:
      - name: Check out code
        uses: actions/checkout@v2
    
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r requirements/test.txt

      - name: Static Code Analysis
        run: |
          pylint **/*.py --fail-under=7.0

      - name: Code Coverage
        run: |
          pytest --ds=demo.settings.dev --cov=. --cov-fail-under=80

      - name: Login to Docker Hub
        run: echo ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }} | docker login -u ${{ secrets.DOCKER_HUB_USERNAME }} --password-stdin

      - name: Build, tag, and push image to Docker Hub
        run: |
          docker build . --file docker-conf/Dockerfile-django-api --tag ${{ secrets.DOCKER_REGISTRY }}/algova-django-api:${GITHUB_SHA::7}
          docker push ${{ secrets.DOCKER_REGISTRY }}/algova-django-api:${GITHUB_SHA::7}
          echo "IMAGE_REF=${{ secrets.DOCKER_REGISTRY }}/algova-django-api:${GITHUB_SHA::7}" >> $GITHUB_ENV
    
      - name: Vulnerability scan
        uses: aquasecurity/trivy-action@0.20.0
        with:
          image-ref: ${{ env.IMAGE_REF }}
          format: 'table'
          exit-code: '0'