push-main.yml

on:
  push:
    branches:
      - main
    tags-ignore:
      - 'v*' # exclude version tags

name: 🚀 Push main
concurrency: push_main

permissions:
  id-token: write # this is required for AWS https://github.com/aws-actions/configure-aws-credentials#usage

env:
  CI: true
  AWS_REGION: eu-west-1
  STAGE: production

defaults:
  run:
    shell: bash

jobs:
  build-and-test:
    name: 🏗 Build & 🧪 Test & 🚀 Deploy
    runs-on: ubuntu-latest
    environment: production
    timeout-minutes: 30
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup pnpm
        uses: pnpm/action-setup@v4.0.0

      - name: Setup Node.js
        id: setup-node
        uses: actions/setup-node@v4
        with:
          node-version-file: '.nvmrc'
          cache: pnpm

      - name: Install Node.js dependencies
        run: pnpm install --frozen-lockfile

      - name: Cache Rust build
        uses: Swatinem/rust-cache@v2
        with:
          workspaces: 'rust-lambdas -> target'

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable

      - name: Install Zig toolchain
        uses: korandoru/setup-zig@v1.7.1
        with:
          zig-version: 0.11.0

      - name: Install Cargo Lambda
        uses: jaxxstorm/action-install-gh-release@v1.12.0
        with:
          repo: cargo-lambda/cargo-lambda
          platform: linux
          arch: x86_64

      - name: Build Rust Lambdas
        run: pnpm build

      - name: Check Rust code
        run: cargo check-lambdas

      - name: Test Rust code
        run: cargo test-lambdas

      - name: 🧪 Check format
        run: pnpm format-check

      - name: 🧪 Test linter
        run: pnpm test-linter

      - name: 🏗 Test types
        run: pnpm test-type

      - name: 🏗 Test unit
        run: pnpm test-unit

      - name: ⛅ Test CDK
        run: pnpm test-cdk

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: ${{ env.AWS_REGION }}
          role-to-assume: ${{ secrets.AWS_DEPLOY_ROLE }}

      - name: CDK Bootstrap
        run: pnpm run bootstrap

      - name: 🚀 Deploy
        run: pnpm run deploy --context stage=production

      - name: 🔎 Run integration tests
        run: pnpm test-integration

      - name: 🧹 CDK garbage collection
        run: pnpm run clean