chore: import upstream snapshot with attribution
This commit is contained in:
wehub-resource-sync
@@ -0,0 +1,202 @@
|
||||
name: Build and Push Docker Image
|
||||
|
||||
on:
|
||||
push:
|
||||
tags:
|
||||
- 'v*'
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
test_tag:
|
||||
description: 'Test tag name (e.g., v0.1.1-test)'
|
||||
required: false
|
||||
default: 'v0.1.1-test'
|
||||
|
||||
env:
|
||||
GHCR_REGISTRY: ghcr.io
|
||||
IMAGE_NAME: insforge-oss
|
||||
|
||||
jobs:
|
||||
build-amd64:
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: read
|
||||
packages: write
|
||||
id-token: write
|
||||
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v4
|
||||
|
||||
- name: Log in to GitHub Container Registry
|
||||
uses: docker/login-action@v4
|
||||
with:
|
||||
registry: ${{ env.GHCR_REGISTRY }}
|
||||
username: ${{ github.actor }}
|
||||
password: ${{ secrets.GHCR_PAT }}
|
||||
|
||||
- name: Extract metadata for GHCR
|
||||
id: meta
|
||||
uses: docker/metadata-action@v6
|
||||
with:
|
||||
images: ${{ env.GHCR_REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
|
||||
flavor: |
|
||||
suffix=-amd64
|
||||
latest=false
|
||||
tags: |
|
||||
type=ref,event=tag
|
||||
type=raw,value=${{ github.event.inputs.test_tag }},enable=${{ github.event_name == 'workflow_dispatch' }}
|
||||
|
||||
- name: Build and push (amd64)
|
||||
uses: docker/build-push-action@v7
|
||||
with:
|
||||
context: .
|
||||
target: runner
|
||||
platforms: linux/amd64
|
||||
push: true
|
||||
tags: ${{ steps.meta.outputs.tags }}
|
||||
labels: ${{ steps.meta.outputs.labels }}
|
||||
cache-from: type=gha,scope=amd64
|
||||
cache-to: type=gha,mode=max,scope=amd64
|
||||
build-args: |
|
||||
VERSION=${{ github.ref_name }}
|
||||
BUILD_DATE=${{ github.event.head_commit.timestamp }}
|
||||
COMMIT_SHA=${{ github.sha }}
|
||||
VITE_PUBLIC_POSTHOG_KEY=${{ secrets.POSTHOG_KEY }}
|
||||
|
||||
build-arm64:
|
||||
runs-on: ubuntu-24.04-arm
|
||||
permissions:
|
||||
contents: read
|
||||
packages: write
|
||||
id-token: write
|
||||
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v4
|
||||
|
||||
- name: Log in to GitHub Container Registry
|
||||
uses: docker/login-action@v4
|
||||
with:
|
||||
registry: ${{ env.GHCR_REGISTRY }}
|
||||
username: ${{ github.actor }}
|
||||
password: ${{ secrets.GHCR_PAT }}
|
||||
|
||||
- name: Extract metadata for GHCR
|
||||
id: meta
|
||||
uses: docker/metadata-action@v6
|
||||
with:
|
||||
images: ${{ env.GHCR_REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
|
||||
flavor: |
|
||||
suffix=-arm64
|
||||
latest=false
|
||||
tags: |
|
||||
type=ref,event=tag
|
||||
type=raw,value=${{ github.event.inputs.test_tag }},enable=${{ github.event_name == 'workflow_dispatch' }}
|
||||
|
||||
- name: Build and push (arm64)
|
||||
uses: docker/build-push-action@v7
|
||||
with:
|
||||
context: .
|
||||
target: runner
|
||||
platforms: linux/arm64
|
||||
push: true
|
||||
tags: ${{ steps.meta.outputs.tags }}
|
||||
labels: ${{ steps.meta.outputs.labels }}
|
||||
cache-from: type=gha,scope=arm64
|
||||
cache-to: type=gha,mode=max,scope=arm64
|
||||
build-args: |
|
||||
VERSION=${{ github.ref_name }}
|
||||
BUILD_DATE=${{ github.event.head_commit.timestamp }}
|
||||
COMMIT_SHA=${{ github.sha }}
|
||||
VITE_PUBLIC_POSTHOG_KEY=${{ secrets.POSTHOG_KEY }}
|
||||
|
||||
merge-manifests:
|
||||
needs: [build-amd64, build-arm64]
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: read
|
||||
packages: write
|
||||
|
||||
steps:
|
||||
- name: Log in to GitHub Container Registry
|
||||
uses: docker/login-action@v4
|
||||
with:
|
||||
registry: ${{ env.GHCR_REGISTRY }}
|
||||
username: ${{ github.actor }}
|
||||
password: ${{ secrets.GHCR_PAT }}
|
||||
|
||||
- name: Extract metadata for GHCR
|
||||
id: meta
|
||||
uses: docker/metadata-action@v6
|
||||
with:
|
||||
images: ${{ env.GHCR_REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
|
||||
flavor: |
|
||||
latest=false
|
||||
tags: |
|
||||
type=ref,event=tag
|
||||
type=raw,value=${{ github.event.inputs.test_tag }},enable=${{ github.event_name == 'workflow_dispatch' }}
|
||||
type=raw,value=latest,enable=${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && !contains(github.ref_name, '-') }}
|
||||
|
||||
- name: Create and push multi-arch manifest
|
||||
env:
|
||||
GHCR_IMAGE_RAW: ${{ env.GHCR_REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
|
||||
SOURCE_VERSION: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.test_tag || github.ref_name }}
|
||||
run: |
|
||||
GHCR_IMAGE=$(echo "${GHCR_IMAGE_RAW}" | tr '[:upper:]' '[:lower:]')
|
||||
for TAG in $(echo "${{ steps.meta.outputs.tags }}" | tr ',' '\n'); do
|
||||
docker buildx imagetools create \
|
||||
--tag "${TAG}" \
|
||||
"${GHCR_IMAGE}:${SOURCE_VERSION}-amd64" \
|
||||
"${GHCR_IMAGE}:${SOURCE_VERSION}-arm64"
|
||||
done
|
||||
|
||||
push-to-ecr:
|
||||
needs: merge-manifests
|
||||
runs-on: ubuntu-latest
|
||||
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && !contains(github.ref_name, '-')
|
||||
permissions:
|
||||
id-token: write
|
||||
contents: read
|
||||
|
||||
steps:
|
||||
- name: Configure AWS credentials
|
||||
uses: aws-actions/configure-aws-credentials@v6
|
||||
with:
|
||||
role-to-assume: ${{ secrets.AWS_ECR_ROLE_ARN }}
|
||||
aws-region: ${{ secrets.AWS_ECR_REGION }}
|
||||
|
||||
- name: Login to Amazon ECR
|
||||
id: ecr-login
|
||||
uses: aws-actions/amazon-ecr-login@v2
|
||||
|
||||
- name: Log in to GitHub Container Registry
|
||||
uses: docker/login-action@v4
|
||||
with:
|
||||
registry: ${{ env.GHCR_REGISTRY }}
|
||||
username: ${{ github.actor }}
|
||||
password: ${{ secrets.GHCR_PAT }}
|
||||
|
||||
- name: Install crane
|
||||
uses: imjasonh/setup-crane@6da1ae018866400525525ce74ff892880c099987 # v0.5
|
||||
|
||||
- name: Copy multi-arch image to ECR
|
||||
env:
|
||||
ECR_REGISTRY: ${{ steps.ecr-login.outputs.registry }}
|
||||
VERSION: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.test_tag || github.ref_name }}
|
||||
GHCR_IMAGE_RAW: ${{ env.GHCR_REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
|
||||
ECR_IMAGE: ${{ steps.ecr-login.outputs.registry }}/${{ env.IMAGE_NAME }}
|
||||
TAG_LATEST: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && !contains(github.ref_name, '-') }}
|
||||
run: |
|
||||
# Convert GHCR image name to lowercase (Docker requires lowercase)
|
||||
GHCR_IMAGE=$(echo "${GHCR_IMAGE_RAW}" | tr '[:upper:]' '[:lower:]')
|
||||
# Copy multi-arch image from GHCR to ECR (preserves all platforms)
|
||||
crane copy ${GHCR_IMAGE}:${VERSION} ${ECR_IMAGE}:${VERSION}
|
||||
if [[ "${TAG_LATEST}" == "true" ]]; then
|
||||
crane copy ${GHCR_IMAGE}:${VERSION} ${ECR_IMAGE}:latest
|
||||
fi
|
||||
@@ -0,0 +1,29 @@
|
||||
name: Check Migrations
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [ main ]
|
||||
pull_request:
|
||||
branches: [ '*' ]
|
||||
# Required by the merge queue: the queue builds a temporary `merge_group` ref
|
||||
# (PR rebased onto the latest main) and waits for this check to report on it.
|
||||
# Without this trigger the check never runs for queued PRs and the queue stalls.
|
||||
merge_group:
|
||||
|
||||
jobs:
|
||||
check-duplicate-numbers:
|
||||
name: Check for duplicate migration numbers
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v6
|
||||
with:
|
||||
node-version: '20'
|
||||
|
||||
- name: Check for duplicate migration numbers
|
||||
run: node scripts/check-migration-duplicates.js
|
||||
working-directory: backend
|
||||
@@ -0,0 +1,24 @@
|
||||
name: CI Pre-merge Check
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
branches: [ main, master, develop ]
|
||||
push:
|
||||
branches: [ main, master, develop ]
|
||||
workflow_dispatch: # Allows manual triggering for testing
|
||||
|
||||
jobs:
|
||||
docker-build:
|
||||
name: CI Pre-merge Check
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Build Docker image
|
||||
uses: docker/build-push-action@v7
|
||||
with:
|
||||
context: .
|
||||
push: false
|
||||
tags: insforge:test
|
||||
@@ -0,0 +1,65 @@
|
||||
name: E2E Tests
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
branches: [main, master, develop]
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
e2e:
|
||||
name: E2E Tests
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Create .env file
|
||||
run: |
|
||||
cat > .env << EOF
|
||||
POSTGRES_USER=postgres
|
||||
POSTGRES_PASSWORD=postgres
|
||||
POSTGRES_DB=insforge
|
||||
DATABASE_URL=postgresql://postgres:postgres@postgres:5432/insforge
|
||||
JWT_SECRET=test-secret-key-for-ci-cd-pipeline
|
||||
ROOT_ADMIN_USERNAME=admin
|
||||
ROOT_ADMIN_PASSWORD=test-admin-password-for-ci
|
||||
TEST_API_BASE=http://localhost:7130/api
|
||||
INSFORGE_DISABLE_WRITE_RATE_LIMIT=1
|
||||
EOF
|
||||
|
||||
- name: Start Docker Compose services
|
||||
run: docker compose up -d
|
||||
|
||||
- name: Wait for PostgreSQL to be ready
|
||||
run: |
|
||||
echo "Waiting for PostgreSQL..."
|
||||
timeout 60 bash -c 'until docker compose exec -T postgres pg_isready -U postgres; do sleep 2; done'
|
||||
|
||||
- name: Wait for InsForge backend to be ready
|
||||
run: |
|
||||
echo "Waiting for InsForge backend..."
|
||||
timeout 180 bash -c 'until curl -f http://localhost:7130/api/health 2>/dev/null; do echo "Waiting..."; sleep 5; done'
|
||||
echo "Backend is ready!"
|
||||
|
||||
- name: Install test dependencies in container
|
||||
run: docker compose exec -T insforge apk add --no-cache bash curl jq postgresql-client
|
||||
|
||||
- name: Run E2E tests
|
||||
run: docker compose exec -T insforge npm run test:e2e
|
||||
|
||||
- name: Show container logs on failure
|
||||
if: failure()
|
||||
run: |
|
||||
echo "=== PostgreSQL logs ==="
|
||||
docker compose logs postgres
|
||||
echo ""
|
||||
echo "=== InsForge backend logs ==="
|
||||
docker compose logs insforge
|
||||
echo ""
|
||||
echo "=== PostgREST logs ==="
|
||||
docker compose logs postgrest
|
||||
|
||||
- name: Cleanup
|
||||
if: always()
|
||||
run: docker compose down -v
|
||||
@@ -0,0 +1,128 @@
|
||||
name: Frontend Tests
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
branches: [main, master, develop]
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
dashboard-unit-tests:
|
||||
name: Dashboard Unit Tests
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v6
|
||||
with:
|
||||
node-version: 20
|
||||
cache: npm
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
- name: Run dashboard unit tests
|
||||
run: npm --workspace @insforge/dashboard run test:unit
|
||||
|
||||
dashboard-component-tests:
|
||||
name: Dashboard Component Tests
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v6
|
||||
with:
|
||||
node-version: 20
|
||||
cache: npm
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
- name: Run dashboard component tests
|
||||
run: npm --workspace @insforge/dashboard run test:component
|
||||
|
||||
ui-unit-tests:
|
||||
name: UI Unit Tests
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v6
|
||||
with:
|
||||
node-version: 20
|
||||
cache: npm
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
- name: Run UI unit tests
|
||||
run: npm --workspace @insforge/ui run test:unit
|
||||
|
||||
ui-component-tests:
|
||||
name: UI Component Tests
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v6
|
||||
with:
|
||||
node-version: 20
|
||||
cache: npm
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
- name: Run UI component tests
|
||||
run: npm --workspace @insforge/ui run test:component
|
||||
|
||||
dashboard-e2e-tests:
|
||||
name: Dashboard E2E Tests
|
||||
runs-on: ubuntu-latest
|
||||
needs:
|
||||
- dashboard-unit-tests
|
||||
- dashboard-component-tests
|
||||
- ui-unit-tests
|
||||
- ui-component-tests
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v6
|
||||
with:
|
||||
node-version: 20
|
||||
cache: npm
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
- name: Install Playwright Chromium
|
||||
run: npx playwright install --with-deps chromium
|
||||
|
||||
- name: Run dashboard E2E tests
|
||||
run: npm --workspace @insforge/dashboard run test:ui
|
||||
|
||||
- name: Upload Playwright artifacts
|
||||
if: failure()
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: dashboard-playwright-results
|
||||
path: |
|
||||
packages/dashboard/playwright-report/
|
||||
packages/dashboard/test-results/
|
||||
retention-days: 7
|
||||
@@ -0,0 +1,69 @@
|
||||
name: Integration Tests
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
branches: [main, master, develop]
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
integration-tests:
|
||||
name: Integration Tests
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
services:
|
||||
postgres:
|
||||
image: ghcr.io/insforge/postgres:v15.13.2
|
||||
env:
|
||||
POSTGRES_USER: postgres
|
||||
POSTGRES_PASSWORD: postgres
|
||||
POSTGRES_DB: insforge
|
||||
ports:
|
||||
- 5432:5432
|
||||
options: >-
|
||||
--health-cmd "pg_isready -U postgres"
|
||||
--health-interval 5s
|
||||
--health-timeout 5s
|
||||
--health-retries 10
|
||||
|
||||
env:
|
||||
PGHOST: 127.0.0.1
|
||||
PGPORT: 5432
|
||||
PGUSER: postgres
|
||||
PGPASSWORD: postgres
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
- name: Install Postgres client
|
||||
run: |
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y postgresql-client
|
||||
|
||||
- name: Wait for Postgres
|
||||
run: |
|
||||
for i in {1..60}; do
|
||||
if pg_isready -h 127.0.0.1 -p 5432 -U postgres; then
|
||||
exit 0
|
||||
fi
|
||||
sleep 2
|
||||
done
|
||||
echo "postgres not ready in time"
|
||||
exit 1
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: 22
|
||||
cache: npm
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
- name: Run integration tests
|
||||
run: cd backend && npm run test:integration
|
||||
@@ -0,0 +1,49 @@
|
||||
name: Lint and Format Check
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [ main ]
|
||||
pull_request:
|
||||
branches: [ '*' ]
|
||||
|
||||
jobs:
|
||||
lint-and-format:
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v6
|
||||
with:
|
||||
node-version: '20'
|
||||
cache: 'npm'
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
- name: Check insforge-dev skill copies are in sync
|
||||
run: scripts/sync-skills.sh --check
|
||||
|
||||
- name: Get changed files
|
||||
id: changed-files
|
||||
uses: tj-actions/changed-files@v45
|
||||
with:
|
||||
files: |
|
||||
**/*.{ts,tsx,js,jsx,mjs,cjs}
|
||||
|
||||
- name: Run ESLint on changed files
|
||||
if: steps.changed-files.outputs.any_changed == 'true'
|
||||
run: npx eslint ${{ steps.changed-files.outputs.all_changed_files }}
|
||||
|
||||
- name: Get changed files for Prettier
|
||||
id: changed-files-prettier
|
||||
uses: tj-actions/changed-files@v45
|
||||
|
||||
- name: Check Prettier formatting on changed files
|
||||
if: steps.changed-files-prettier.outputs.any_changed == 'true'
|
||||
run: npx prettier --check --ignore-unknown ${{ steps.changed-files-prettier.outputs.all_changed_files }}
|
||||
|
||||
- name: Run TypeScript type checking
|
||||
run: npm run typecheck
|
||||
@@ -0,0 +1,27 @@
|
||||
name: Unit Tests
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
branches: [main, master, develop]
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
unit-tests:
|
||||
name: Unit Tests
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v6
|
||||
with:
|
||||
node-version: 20
|
||||
cache: npm
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
- name: Run backend unit tests
|
||||
run: npm run test:backend
|
||||
Reference in New Issue
Block a user