ci.yml

name: CI

on:
  pull_request:

  workflow_call:
    inputs:
      push:
        type: boolean
        description: To push built images or not
        default: false
    outputs:
      restylers:
        description: Changed restylers
        value: ${{ jobs.changes.outputs.restylers }}

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  DOCKER_BUILD_SUMMARY: "false"
  DOCKER_BUILD_RECORD_UPLOAD: "false"
  LOG_COLOR: always
  LOG_CONCURRENCY: 1
  LOG_BREAKPOINT: 200

jobs:
  tools:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - id: stack
        uses: freckle/stack-action@v5
        with:
          working-directory: _tools
      - uses: actions/upload-artifact@v4
        with:
          name: tools
          path: "${{ steps.stack.outputs.local-install-root }}/bin/*"
          if-no-files-found: error

  changes:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - id: changes
        uses: dorny/paths-filter@v3
        with:
          filters: |
            all: '**/*'
          list-files: shell

      - id: filtered
        name: Identify Restyler changes
        run: ./.github/bin/filter-changes ${{ steps.changes.outputs.all_files }}
    outputs:
      restylers: ${{ steps.filtered.outputs.restylers }}

  restylers:
    needs:
      - tools
      - changes
    if: ${{ needs.changes.outputs.restylers }}

    runs-on: ubuntu-latest

    permissions:
      contents: read
      pull-requests: read
      id-token: write

    steps:
      - uses: actions/checkout@v4
      - uses: actions/download-artifact@v4
        with:
          name: tools

      - name: Install tools
        run: |
          chmod +x ./restylers
          sudo mv -v restylers /usr/local/bin
          curl --proto '=https' --tlsv1.2 -sSf \
            https://raw.githubusercontent.com/restyled-io/restyler/main/install | sudo sh

      - if: ${{ inputs.push }}
        name: AWS Login
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: ${{ vars.AWS_REGION }}
          role-to-assume: ${{ vars.AWS_ROLE }}

      - if: ${{ inputs.push }}
        name: Create ECR repositories if necessary
        run: |
          for name in ${{ needs.changes.outputs.restylers }}; do
            rname=restyler-$name

            if ! aws ecr-public describe-repositories --repository-names "$rname" &>/dev/null; then
              echo "Creating ECR repository for $rname"
              aws ecr-public create-repository --repository-name "$rname"
            fi
          done

      - if: ${{ inputs.push }}
        name: ECR Login
        id: ecr-login
        uses: aws-actions/amazon-ecr-login@v2
        with:
          registry-type: public

      - name: Build${{ inputs.push && ', test, and push' || ' and test'}}
        run: >-
          restylers
          ${{ runner.debug && '--debug' || '' }}
          --write tested.yaml
          --no-pull
          ${{ inputs.push && '--push' || '' }}
          ${{ needs.changes.outputs.restylers }}

      - name: Build merged restylers.yaml
        run: |
          gh release download dev -p restylers.yaml
          mv -v restylers.yaml base.yaml

          ruby -r yaml > restylers.yaml <<'EOM'
          base = YAML.safe_load_file("./base.yaml")
          tested = YAML.safe_load_file("./tested.yaml")
          merged = base.map do |b|
            tested.find { _1.fetch("name") == b.fetch("name") } || b
          end
          puts YAML.dump(merged)
          EOM

          echo "::group::Merged manifest"
          cat restylers.yaml
          echo "::endgroup::"

          echo "::group::Changes"
          diff -U 3 base.yaml restylers.yaml || true
          echo "::endgroup::"
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      # Test manifest
      - uses: restyled-io/actions/setup-demo@v4
      - uses: restyled-io/actions/setup@v4
      - uses: restyled-io/actions/run@v4
        with:
          paths: .
          manifest: ./restylers.yaml
          dry-run: true

      - uses: actions/upload-artifact@v4
        with:
          name: manifest
          path: restylers.yaml
          if-no-files-found: error

  lint:
    needs: changes
    if: ${{ needs.changes.outputs.restylers }}
    runs-on: ubuntu-latest
    steps:
      - id: prep
        run: |
          {
            printf 'dockerfiles='
            for restyler in ${{ needs.changes.outputs.restylers }}; do
              printf './%s/Dockerfile ' "$restyler"
            done
            echo
          } >>"$GITHUB_OUTPUT"

      - uses: actions/checkout@v4
      - uses: hadolint/hadolint-action@master
        with:
          dockerfile: ${{ steps.prep.outputs.dockerfiles }}
          failure-threshold: error