checks.yml

name: PR and main branch checks

on:
  workflow_dispatch:
  push:
    branches:
      - 'main'
    paths-ignore:
      - 'README.md'
      - 'docs/**'
      - 'mkdocs.yml'
      - 'LICENSE'
      - 'getting_started.md'
      - 'docker-compose.yml'
      - 'playground/**'
      - 'CNAME'
      - 'requirements.txt'
  pull_request:
    paths-ignore:
      - 'README.md'
      - 'docs/**'
      - 'mkdocs.yml'
      - 'LICENSE'
      - 'getting_started.md'
      - 'docker-compose.yml'
      - 'playground/**'
      - 'CNAME'
      - 'requirements.txt'

env:
  go-version: '1.23.2'
  golangci-lint-version: v1.60
  sonar-project-key: GreenmaskIO_greenmask
  sonar-org: greenmaskio
  sonar-exclude-files: docker/**,.github/**,docs/**,playground/**,test/**,**/*_test.go

permissions:
  contents: read

jobs:
  tests:
    uses: ./.github/workflows/tests.yml

  build:
    uses: ./.github/workflows/build.yml
    needs: 
      - tests

  code_check:
    name: lint
    runs-on: ubuntu-latest
    needs: 
      - tests
    steps:
      - uses: actions/checkout@v4      
        with:
          fetch-depth: 0

      - uses: actions/setup-go@v5
        with:
          go-version: ${{ env.go-version }}

      - uses: actions/cache/restore@v4
        id: restore-cache
        with:
          path: coverage.out
          key: ${{ runner.os }}-coverage-${{ github.sha }}

      - name: golangci-lint
        uses: golangci/golangci-lint-action@v6
        with:
          version: ${{ env.golangci-lint-version }}

      - name: SonarQube Scan
        uses: SonarSource/sonarcloud-github-action@master
        with:
          args: >
            -Dsonar.go.coverage.reportPaths=coverage.out
            -Dsonar.projectKey=${{ env.sonar-project-key }}
            -Dsonar.organization=${{ env.sonar-org }}
            -Dsonar.exclusions=${{ env.sonar-exclude-files }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}