name: "CI"
on:
  push:
    branches:
      - master
  pull_request:

env:
  TEST_IMAGE_NAME: hadolint-action:${{github.sha}}

jobs:
  lint:
    name: Lint
    runs-on: ubuntu-20.04
    container: pipelinecomponents/hadolint:0.10.1
    steps:
      - uses: actions/checkout@v2
      - name: Run hadolint
        run: hadolint Dockerfile

  build-test:
    name: Build and Test
    runs-on: ubuntu-20.04
    needs: ["lint"]
    steps:
      - uses: actions/checkout@v2
      - name: Build Docker image
        run: docker build -t $TEST_IMAGE_NAME .

      - name: Run Structure tests
        uses: brpaz/structure-tests-action@v1.1.2
        with:
          image: ${{ env.TEST_IMAGE_NAME }}

  integration-tests:
    name: Integration Tests
    runs-on: ubuntu-20.04
    needs: build-test
    steps:
      - uses: actions/checkout@v2

      - name: Run integration test 1
        uses: ./
        with:
          dockerfile: testdata/Dockerfile
          no-fail: true

      - name: Run integration test 2 - ignore a rule
        # This step is supposed to print out an info level rule violation
        # but completely ignore the two rules listed below
        uses: ./
        with:
          dockerfile: testdata/warning.Dockerfile
          ignore: 'DL3014,DL3008'
          no-fail: true

      - name: Run integration test 3 - set failure threshold
        # This step will print out an info level rule violation, but not fail
        # because of the high failure threshold.
        uses: ./
        with:
          dockerfile: testdata/info.Dockerfile
          failure-threshold: warning

      - name: Run integration test 4 - output format
        # This step will never fail, but will print out rule violations as json.
        uses: ./
        with:
          dockerfile: testdata/warning.Dockerfile
          failure-threshold: error
          format: json

      - name: Run integration test 5 - output format
        # This step will never fail, but will print out rule violations.
        uses: ./
        with:
          dockerfile: testdata/warning.Dockerfile
          config: testdata/hadolint.yaml

      - name: Run integration test 6 - output to file
        # This step will never fail, but will print out rule violations.
        uses: ./
        with:
          dockerfile: testdata/warning.Dockerfile
          format: sarif
          output-file: /report.sarif

  release:
    if: github.event_name == 'push' && github.ref == 'refs/heads/master'
    name: Release
    runs-on: ubuntu-20.04
    needs: integration-tests
    steps:
      - uses: actions/checkout@v2
      - uses: cycjimmy/semantic-release-action@v2
        with:
          extra_plugins: |
            @semantic-release/git
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}