CI: Attempt 1

.github/workflows/collection.yml

@@ -0,0 +1,152 @@
+name: CI 2
+
+env:
+    REGISTRY: ghcr.io
+    COLLECTION_IMAGE_NAME: icdocsoc/collection
+
+on:
+    push:
+    pull_request:
+
+permissions:
+    actions: read
+    contents: read
+
+jobs:
+    changes:
+        runs-on: ubuntu-latest
+        outputs:
+            migrations: ${{ steps.filter.outputs.migrations }}
+        steps:
+            - uses: actions/checkout@v4
+            - uses: dorny/paths-filter@v3
+              id: filter
+              with:
+                  filters: |
+                      migrations:
+                      - 'collection/prisma/migrations/**'
+
+    install-dependencies:
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+            - uses: actions/setup-node@v4
+              with:
+                  node-version-file: ".nvmrc"
+                  cache: "npm"
+            - name: Cache node_modules
+              uses: actions/cache@v4
+              id: cache-primes
+              with:
+                  path: node_modules
+                  key: ${{ runner.os }}-nx-${{ hashFiles('package-lock.json') }}
+            - name: Install dependencies
+              run: npm ci
+            - uses: nrwl/nx-set-shas@v4
+
+    build:
+        runs-on: ubuntu-latest
+        needs: install-dependencies
+        steps:
+            - uses: actions/checkout@v4
+            - uses: actions/setup-node@v4
+              with:
+                  node-version-file: ".nvmrc"
+                  cache: "npm"
+            - name: Load cached node_modules
+              uses: actions/cache@v4
+              id: cache-primes
+              with:
+                  path: node_modules
+                  key: ${{ runner.os }}-nx-${{ hashFiles('package-lock.json') }}
+            - name: Build libs
+              run: npx nx run-many -t build-local
+            - name: Prisma generate
+              run: npx nx run-many -t prisma-generate
+            - name: Build all
+              run: npx nx affected -t build build-local
+
+    lint:
+        runs-on: ubuntu-latest
+        needs: install-dependencies
+        steps:
+            - uses: actions/checkout@v4
+            - uses: actions/setup-node@v4
+              with:
+                  node-version-file: ".nvmrc"
+                  cache: "npm"
+            - name: Load cached node_modules
+              uses: actions/cache@v4
+              id: cache-primes
+              with:
+                  path: node_modules
+                  key: ${{ runner.os }}-nx-${{ hashFiles('package-lock.json') }}
+            - name: Run Linting
+              run: npx nx affected -t lint
+
+    test:
+        runs-on: ubuntu-latest
+        needs: install-dependencies
+        steps:
+            - uses: actions/checkout@v4
+            - uses: actions/setup-node@v4
+              with:
+                  node-version-file: ".nvmrc"
+                  cache: "npm"
+            - name: Load cached node_modules
+              uses: actions/cache@v4
+              id: cache-primes
+              with:
+                  path: node_modules
+                  key: ${{ runner.os }}-nx-${{ hashFiles('package-lock.json') }}
+            - name: Build libs
+              run: npx nx run-many -t build-local
+            - name: Prisma generate
+              run: npx nx run-many -t prisma-generate
+            - name: Test
+              run: npx nx affected -t test
+
+    build-and-push-collection-image:
+        needs:
+            - build
+            - lint
+            - test
+        # if: github.ref == 'refs/heads/main'
+        runs-on: ubuntu-latest
+        permissions:
+            contents: read
+            packages: write
+            attestations: write
+            id-token: write
+        steps:
+            - name: Checkout repository
+              uses: actions/checkout@v4
+            - name: Set up Docker Buildx
+              uses: docker/setup-buildx-action@v3
+            - name: Log in to the Container registry
+              uses: docker/login-action@v3
+              with:
+                  registry: ${{ env.REGISTRY }}
+                  username: ${{ github.actor }}
+                  password: ${{ secrets.GITHUB_TOKEN }}
+            - name: Extract metadata (tags, labels) for Docker
+              id: meta
+              uses: docker/metadata-action@v5
+              with:
+                  images: ${{ env.REGISTRY }}/${{ env.COLLECTION_IMAGE_NAME }}
+                  tags: |
+                      type=ref,event=branch
+                      type=ref,event=tag
+                      type=ref,event=pr
+                      type=sha
+                      type=raw,value=latest,enable={{is_default_branch}}
+            - name: Build and push Docker image
+              id: push
+              uses: docker/build-push-action@v6
+              with:
+                  context: .
+                  file: ./collection/Dockerfile
+                  push: true
+                  tags: ${{ steps.meta.outputs.tags }}
+                  labels: ${{ steps.meta.outputs.labels }}
+                  no-cache: true