pipeline.yml

name: Pipeline

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  # Allow to run this workflow manually
  workflow_dispatch:

jobs:
  changes:
    runs-on: ubuntu-latest
    permissions:
      pull-requests: read
    outputs:
      packages: ${{ steps.filter.outputs.changes }} # Contains the list of packages that have changed
    steps:
      - uses: actions/checkout@v4
      - uses: dorny/paths-filter@v3
        id: filter
        with:
          filters: |
            shared: &shared
              - "*"
              - ".github/**"
              - "doc/**"
              - "packages/shared/**"
            dito:
              - *shared
              - "packages/dito/**"
            tool-finder:
              - *shared
              - "packages/tool-finder/**"

  vulnerability-scan:
    uses: ./.github/workflows/scan.yml
    secrets: inherit

  check-and-test-shared:
    needs:
      - changes
    if: contains(needs.changes.outputs.packages, 'shared')
    uses: ./.github/workflows/check-and-test.yml
    with:
      package: shared
      shouldRunIntegrationTests: false
    secrets: inherit

  check-test-build-deploy:
    needs:
      - changes
      - check-and-test-shared
      - vulnerability-scan
    # always() ensures that the job runs even if the needed jobs are skipped
    if: ${{ always() && (needs.check-and-test-shared.result == 'success' || needs.check-and-test-shared.result == 'skipped') }}
    strategy:
      fail-fast: false
      max-parallel: 1
      matrix:
        package: ${{ fromJSON(needs.changes.outputs.packages) }}
        exclude:
          - package: shared
    uses: ./.github/workflows/test-build-deploy.yml
    with:
      package: ${{ matrix.package }}
      environment: production
    secrets: inherit