transformations_aws_compliance_free_postgres.yml

name: "Test AWS Compliance Free Policies: Postgres"

on:
  pull_request:
    paths:
      - "transformations/aws/compliance-free/**"
      - ".github/workflows/transformations_aws_compliance_free_postgres.yml"
      - "transformations/aws/macros/**"
      - "transformations/aws/models/**"
      - "transformations/macros/**"
  push:
    branches:
      - main
    paths:
      - "transformations/aws/compliance-free/**"
      - ".github/workflows/transformations_aws_compliance_free_postgres.yml"
      - "transformations/aws/macros/**"
      - "transformations/aws/models/**"
      - "transformations/macros/**"

jobs:
  transformations-aws-compliance-free:
    name: transformations/aws/compliance-free
    timeout-minutes: 30
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./transformations/aws/compliance-free
    services:
      postgres:
        image: postgres:11
        env:
          POSTGRES_PASSWORD: pass
          POSTGRES_USER: postgres
          POSTGRES_DB: postgres
        ports:
          - 5432:5432
        # Set health checks to wait until postgres has started
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          token: ${{ secrets.GH_CQ_BOT }}
      - uses: actions/setup-python@v4
        with:
          python-version: "3.9"
          cache: "pip"
          cache-dependency-path: "./transformations/aws/compliance-free/requirements.txt"
      - name: Install dependencies
        run: pip install -r requirements.txt
      - name: Setup CloudQuery
        uses: cloudquery/setup-cloudquery@v3
        with:
          version: v4.0.0
      # Test unpacked version
      - name: Migrate DB
        run: cloudquery migrate tests/postgres.yml
        env:
          CQ_DSN: postgresql://postgres:pass@localhost:5432/postgres
      - name: Run Policies
        run: |
          dbt run --target dev-pg --profiles-dir ./tests
      # Test packed version
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 'lts/*'
          cache: 'npm'
          cache-dependency-path: scripts/dbt-pack/package-lock.json
      - name: Install Dependencies
        run: npm ci
        working-directory: ./scripts/dbt-pack
      - name: Pack DBT
        working-directory: ./scripts/dbt-pack
        run: node index.js dbt-pack --project-dir=../../transformations/aws/compliance-free
      - name: Unzip Packed DBT
        run: unzip -o build/aws_compliance_free.zip -d build/aws_compliance_free
      - name: Run Unpacked DBT
        working-directory: ./transformations/aws/compliance-free/build/aws_compliance_free
        run: |
          dbt run --target dev-pg --profiles-dir ../../tests
      - name: Gen docs
        run: |
          make gen-docs
      - uses: stefanzweifel/git-auto-commit-action@v5
        with:
          commit_message: "chore: Update readme"
          file_pattern: 'transformations/aws/compliance-free/README.md'