github action

Githubaction

Author: JMcunst

.github/workflows/cr.yml

@@ -0,0 +1,34 @@
+name: Code Review
+
+permissions:
+  contents: read
+  pull-requests: write
+
+env:
+  WEBHOOK_URL: ${{ secrets.WEBHOOK }}
+  OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+
+jobs:
+  code_review:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: anc95/ChatGPT-CodeReview@main
+        env:
+          MODEL: gpt-3.5-turbo
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          OPENAI_API_KEY: ${{ env.OPENAI_API_KEY }}
+          LANGUAGE: Korean
+
+      - name: Send Notification
+        if: ${{ always() }}
+        run: |
+          if [[ ${{ job.status }} == "success" ]]; then
+            MESSAGE="✅ ${{ job.status }} 백엔드 OpenAI 코드 리뷰 성공: batch-service - by ${{ github.actor }}"
+          else
+            MESSAGE="❌ ${{ job.status }} 백엔드 OpenAI 코드 리뷰 실패: batch-service - by ${{ github.actor }}"
+          fi
+          curl -X POST -H "Content-Type: application/json" --data "{\"text\":\"${MESSAGE}\"}" ${{ env.WEBHOOK_URL }}

.github/workflows/ecr.yml

@@ -0,0 +1,74 @@
+name: Java CI with Gradle
+
+on:
+  push:
+    branches: [ "main" ]
+
+env:
+  ECR_URL: ${{ secrets.ECR_REPO_DEV }}
+  ROLE_ARN: ${{ secrets.OIDC_ROLE }}
+  AWS_REGION: ${{ secrets.AWS_REGION }}
+  WEBHOOK_URL: ${{ secrets.WEBHOOK }}
+
+permissions:
+  id-token: write
+  contents: read
+      
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+
+    permissions:
+      id-token: write   # This is required for requesting the JWT
+      contents: read    # This is required for actions/checkout
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 1
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v3
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: 'gradle'
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Build with Gradle
+        run: ./gradlew bootJar
+        
+      - name: Docker build
+        run: docker build -t batch-service .
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          aws-region: ${{ env.AWS_REGION }}
+          role-session-name: GitHubActions
+          role-to-assume: ${{ env.ROLE_ARN }}
+
+      - name: Login to Amazon ECR
+        id: login-ecr
+        uses: aws-actions/amazon-ecr-login@v1
+
+      - name: Publish Image to ECR(BATCH-SERVICE)
+        run: |
+          docker tag batch-service:latest ${{ env.ECR_URL }}:batch-service
+          docker push ${{ env.ECR_URL }}:batch-service
+
+      - name: Send Notification
+        if: ${{ always() }}
+        run: |
+          if [[ ${{ job.status }} == "success" ]]; then
+            MESSAGE="✅ ${{ job.status }} 백엔드 ECR 도커파일 업로드 성공: batch-service - by ${{ github.actor }}"
+          else
+            MESSAGE="❌ ${{ job.status }} 백엔드 ECR 도커파일 업로드 실패: batch-service - by ${{ github.actor }}"
+          fi
+          curl -X POST -H "Content-Type: application/json" --data "{\"text\":\"${MESSAGE}\"}" ${{ env.WEBHOOK_URL }}
+
+    

.github/workflows/pr.yml

@@ -0,0 +1,64 @@
+name: CI Test
+
+on:
+  pull_request:
+    branches: [ main ]
+
+env:
+  AWS_REGION: ${{ secrets.AWS_REGION }}
+  AWS_ACCESS_KEY: ${{ secrets.AWS_ACCESS_KEY_ID }}
+  AWS_SECRET_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+  DEFAULT_OUTPUT: ${{ secrets.AWS_DEFAULT_OUTPUT }}
+  WEBHOOK_URL: ${{ secrets.WEBHOOK }}
+
+permissions: write-all
+
+jobs:
+  test_pr:
+    name: Build and Test
+    runs-on: ubuntu-latest
+      
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 1
+
+      - name: Set up AWS CLI
+        uses: unfor19/install-aws-cli-action@v1
+
+      - name: Configure AWS credentials
+        run: |
+          aws configure set aws_access_key_id ${{ env.AWS_ACCESS_KEY }}
+          aws configure set aws_secret_access_key ${{ env.AWS_SECRET_KEY }}
+          aws configure set default.region ${{ env.AWS_REGION }}
+          aws configure set default.output ${{ env.DEFAULT_OUTPUT }}
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v3
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Test with Gradle
+        run: ./gradlew --info test
+
+      - name: Publish Unit Test Results
+        uses: EnricoMi/publish-unit-test-result-action@v1
+        if: ${{ always() }}
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          files: build/test-results/**/*.xml
+
+      - name: Send Notification
+        if: ${{ always() }}
+        run: |
+          if [[ ${{ job.status }} == "success" ]]; then
+            MESSAGE="✅ ${{ job.status }} 백엔드 Unit Test 성공: batch-service - by ${{ github.actor }}"
+          else
+            MESSAGE="❌ ${{ job.status }} 백엔드 Unit Test 실패: batch-service - by ${{ github.actor }}"
+          fi
+          curl -X POST -H "Content-Type: application/json" --data "{\"text\":\"${MESSAGE}\"}" ${{ env.WEBHOOK_URL }}