ci.yml

name: Lucky CLI Main CI

on:
  push:
    branches: [main]
  pull_request:
    branches: "*"

env:
  FORCE_COLOR: 1
  EARTHLY_CI: 'true'
  EARTHLY_ALLOW_PRIVILEGED: 'true'

jobs:
  specs:
    runs-on: ubuntu-latest
    steps:
      - uses: earthly/actions-setup@v1
        with:
          version: v0.8.0
      - uses: actions/checkout@v4
      - name: Run build
        run: |
          earthly +gh-action-essential

  platform-specs:
    needs: specs
    strategy:
      fail-fast: false
      matrix:
        include:
          - {os: macos-latest}
          - {os: windows-latest}
    runs-on: ${{matrix.os}}
    steps:
      - uses: actions/checkout@v3
      - uses: crystal-lang/install-crystal@v1
      - name: Install shards
        run: shards install
      - name: Run specs
        run: crystal spec --tag "~integration"

  integration-specs:
    needs: specs
    runs-on: ubuntu-latest
    steps:
      - uses: earthly/actions-setup@v1
        with:
          version: v0.8.0
      - uses: actions/checkout@v4
      - name: Run build
        run: |
          earthly +gh-action-integration

  e2e-specs:
    needs: integration-specs
    runs-on: ubuntu-latest
    steps:
      - uses: earthly/actions-setup@v1
        with:
          version: v0.8.0
      - uses: actions/checkout@v4
      - name: Run build
        run: |
          earthly +gh-action-e2e

  e2e-security-specs:
    needs: integration-specs
    if: github.event_name == 'pull_request'
    runs-on: ubuntu-latest
    steps:
      - uses: earthly/actions-setup@v1
        with:
          version: v0.8.0
      - uses: actions/checkout@v4
      - name: Run build
        run: |
          earthly +gh-action-e2e-security
        env:
          EARTHLY_SECRETS: "BRIGHT_TOKEN=${{ secrets.BRIGHT_API_KEY }},BRIGHT_PROJECT_ID=${{ secrets.BRIGHT_PROJECT_ID }}"
          EARTHLY_BUILD_ARGS: "github_ref=${{ github.ref }},github_sha=${{ github.sha }},github_run_id=${{ github.run_id }}"