ci.yml

# Name of the workflow
name: CI Pipeline

# Events that trigger the workflow
on:
  push:
    branches: [ main, develop, mtoof ]  # Trigger on push to main, develop, and mtoof branches
  pull_request:
    branches: [ main, develop, mtoof ]  # Trigger on pull request to main, develop, and mtoof branches

# Define jobs in the workflow
jobs:
  setup:
    runs-on: ubuntu-latest
    steps:
      - name: Upgrade setuptools
        run: pip install --upgrade setuptools

      - name: Checkout code
        uses: actions/checkout@v4  # Update to the latest version to use Node.js 20

      # Set up Python environment
      - name: Set up Python 3.11
        uses: actions/setup-python@v4  # Update to the latest version to use Node.js 20
        with:
          python-version: 3.11  # Use Python version 3.11

      # Install project dependencies
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip  # Upgrade pip
          pip install -r auth_service/requirements.txt  # Install dependencies from auth_service requirements

  security:
    needs: setup
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4  # Update to the latest version to use Node.js 20

      - name: Set up Python 3.11
        uses: actions/setup-python@v4  # Update to the latest version to use Node.js 20
        with:
          python-version: 3.11

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r auth_service/requirements.txt  # Install dependencies from auth_service requirements

      # Set environment variables for security checks
      - name: Set environment variables
        run: echo "DJANGO_SECRET_KEY=${{ secrets.DJANGO_SECRET_KEY }}" >> $GITHUB_ENV

      # Run security checks
      - name: Run security checks
        run: |
          pip install bandit  # Install Bandit for security checks
          bandit -r .  # Run Bandit on the codebase

  build:
    needs: [setup, security]
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4  # Update to the latest version to use Node.js 20

      - name: Set up Python 3.11
        uses: actions/setup-python@v4  # Update to the latest version to use Node.js 20
        with:
          python-version: 3.11

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r auth_service/requirements.txt  # Install dependencies from auth_service requirements

      # Set environment variables for Docker build
      - name: Set environment variables
        run: echo "DJANGO_SECRET_KEY=${{ secrets.DJANGO_SECRET_KEY }}" >> $GITHUB_ENV

      # Build the Docker image from auth_service Dockerfile
      - name: Build Docker image
        run: docker build -t transcendence -f auth_service/Dockerfile .

  deploy:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4  # Update to the latest version to use Node.js 20

      # Log in to Docker Hub
      - name: Deploy to Docker Hub
        env:
          DOCKER_HUB_USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }}
          DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }}
        run: |
          echo "${DOCKER_HUB_PASSWORD}" | docker login -u "${DOCKER_HUB_USERNAME}" --password-stdin
          docker tag transcendence ${DOCKER_HUB_USERNAME}/transcendence:latest
          docker push ${DOCKER_HUB_USERNAME}/transcendence:latest

      # Deploy to the server
      - name: Deploy to server
        run: |
          ssh user@server "docker pull ${DOCKER_HUB_USERNAME}/transcendence:latest && docker-compose up --build -d"