ci.yml

# Name of the workflow
name: CI Pipeline

# Events that trigger the workflow
on:
  push:
    branches: [ main, develop, mtoof ]  # Include mtoof branch
  pull_request:
    branches: [ main, develop, mtoof ]  # Include mtoof branch

# Define jobs in the workflow
jobs:
  setup:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4  # Checkout the repository code

      # Set up Python environment
      - name: Set up Python 3.11
        uses: actions/setup-python@v3
        with:
          python-version: 3.11  # Use Python version 3.11

      # Install build dependencies
      - name: Install build dependencies
        run: |
          python -m pip install --upgrade pip  # Upgrade pip
          pip install setuptools==58.0.4 wheel  # Ensure setuptools and wheel are installed

      # Install project dependencies
      - name: Install dependencies
        run: pip install -r requirements.txt  # Install dependencies from requirements.txt

  test:
    needs: setup
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Set up Python 3.11
        uses: actions/setup-python@v3
        with:
          python-version: 3.11

      # Install build dependencies
      - name: Install build dependencies
        run: |
          python -m pip install --upgrade pip
          pip install setuptools==58.0.4 wheel

      - name: Install dependencies
        run: pip install -r requirements.txt

      # Run test suite
      - name: Run tests
        run: pytest  # Execute tests using pytest

  security:
    needs: setup
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Set up Python 3.11
        uses: actions/setup-python@v3
        with:
          python-version: 3.11

      # Install build dependencies
      - name: Install build dependencies
        run: |
          python -m pip install --upgrade pip
          pip install setuptools==58.0.4 wheel

      - name: Install dependencies
        run: pip install -r requirements.txt

      # Run security checks
      - name: Run security checks
        run: |
          pip install bandit  # Install Bandit for security checks
          bandit -r .  # Run Bandit on the codebase

  build:
    needs: [setup, security]
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Set up Python 3.11
        uses: actions/setup-python@v3
        with:
          python-version: 3.11

      # Install build dependencies
      - name: Install build dependencies
        run: |
          python -m pip install --upgrade pip
          pip install setuptools==58.0.4 wheel

      - name: Install dependencies
        run: pip install -r requirements.txt

      # Build the Docker image
      - name: Build Docker image
        run: docker build -t transcendence .
        run: docker build -t transcendence .

  deploy:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      # Log in to Docker Hub
      - name: Deploy to Docker Hub
        env:
          DOCKER_HUB_USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }}
          DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }}
        run: |
          echo "${DOCKER_HUB_PASSWORD}" | docker login -u "${DOCKER_HUB_USERNAME}" --password-stdin
          docker tag transcendence ${DOCKER_HUB_USERNAME}/transcendence:latest
          docker push ${DOCKER_HUB_USERNAME}/transcendence:latest

      # Conditional deployment based on branch
      - name: Deploy to server
        run: ssh user@server "docker pull ${DOCKER_HUB_USERNAME}/transcendence:latest && docker-compose up --build -d"