Merge branch 'main' into SAC-20-Club-Point-of-Contact-CRUD

.github/assignees.yml

@@ -1 +1,2 @@
 addAssignees: author
+runOnDraft: true

.github/dependabot.yml

@@ -1,6 +1,18 @@
 version: 2
 updates:
   - package-ecosystem: gomod
-    directory: /
+    directory: ./backend/
+    schedule:
+      interval: weekly
+  - package-ecosystem: gomod
+    directory: ./cli/
+    schedule:
+      interval: weekly
+  - package-ecosystem: npm
+    directory: ./frontend/sac-mobile
+    schedule:
+      interval: weekly
+  - package-ecosystem: npm
+    directory: ./frontend/sac-web
     schedule:
       interval: weekly

.github/workflows/auto_assign_author.yml

@@ -2,11 +2,16 @@ name: Auto Assign Author
 
 on:
   pull_request:
-    types: [opened, ready_for_review, reopened]
+    types: [opened, reopened]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   auto-add-assignee:
     runs-on: ubuntu-latest
+    if: github.actor != 'dependabot[bot]' && github.event.pull_request.user.login != 'dependabot[bot]'
     steps:
       - uses: kentaro-m/[email protected]
         with:

.github/workflows/auto_request_review.yml

@@ -2,11 +2,15 @@ name: Auto Request Review
 
 on:
   pull_request:
-    types: [opened, ready_for_review, reopened]
+    types: [opened, reopened]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 jobs:
   auto-request-review:
     runs-on: ubuntu-latest
+    if: github.actor != 'dependabot[bot]' && github.event.pull_request.user.login != 'dependabot[bot]'
     steps:
       - name: Request review from the TLs and random team members
         uses: necojackarc/[email protected]

.github/workflows/go.yml → .github/workflows/backend.yml

@@ -1,14 +1,15 @@
-name: Go
+name: Backend
 
 on:
   push:
-    branches:
-      - main
+    paths:
+      - "backend/**"
+      - ".github/workflows/backend.yml"
   pull_request:
+    types: opened
     paths:
       - "backend/**"
-      - "scripts/init_db.sh"
-      - ".github/workflows/go.yml"
+      - ".github/workflows/backend.yml"
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -25,28 +26,41 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: "1.21"
-      - name: Enforce formatting
-        run: gofmt -l ./backend/ | grep ".go$" | xargs -r echo "Files not formatted:"
-
+      - name: Cache Go Modules
+        uses: actions/cache@v3
+        with:
+          path: ~/go/pkg/mod
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+      - name: Install gofumpt
+        run: go install mvdan.cc/gofumpt@latest
+      - name: Check code formatting
+        run: |
+          unformatted_files=$(gofumpt -l ./backend/)
+          if [ -n "$unformatted_files" ]; then
+            echo "Files not formatted:"
+            echo "$unformatted_files"
+            exit 1
+          fi
   lint:
     name: Lint
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      checks: write
     steps:
-      - name: Checkout Repository
-        uses: actions/checkout@v3
-      - name: Set up Go
-        uses: actions/setup-go@v3
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v4
         with:
           go-version: "1.21"
-      - name: Enforce linting
-        run: |
-          cd backend && lint_output=$(go vet ./...)
-          if [[ -n "$lint_output" ]]; then
-            echo "$lint_output"
-            echo "::error::Linting issues found"
-            exit 1
-          fi
-
+          cache: false
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v3
+        with:
+          version: latest
+          working-directory: ./backend/
   test:
     name: Test
     runs-on: ubuntu-latest
@@ -66,18 +80,23 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: "1.21"
+      - name: Cache Go Modules
+        uses: actions/cache@v3
+        with:
+          path: ~/go/pkg/mod
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
       - name: Install Dependencies
-        run: cd backend && go get ./...
+        run: cd ./backend/ && go get ./...
       - name: Increase max_connections in PostgreSQL
         run: |
           CONTAINER_ID=$(docker ps --filter "publish=5432" --format "{{.ID}}")
           docker exec $CONTAINER_ID bash -c "sed -i 's/^#* *max_connections *= *[0-9]*/max_connections = 256/' /var/lib/postgresql/data/postgresql.conf"
           docker exec $CONTAINER_ID cat /var/lib/postgresql/data/postgresql.conf | grep max_connections
       - name: Restart PostgreSQL Container
         run: docker restart $(docker ps --filter "publish=5432" --format "{{.ID}}")
-      - name: Migrate DB
-        run: cd backend/src && go run main.go --only-migrate
       - name: Run Tests with Coverage
-        run: cd backend && go test -failfast -benchmem -race -coverprofile=coverage.txt ./...
+        run: cd ./backend/ && go test -bench=. -benchmem -race -coverprofile=coverage.txt ./...
       - name: Print Coverage
-        run: cd backend && go tool cover -func=coverage.txt
+        run: cd ./backend/ && go tool cover -func=coverage.txt

.github/workflows/backend_codeql.yml

@@ -0,0 +1,44 @@
+name: Backend CodeQL
+
+on:
+  push:
+    paths:
+      - "backend/**"
+      - ".github/workflows/backend_codeql.yml"
+  pull_request:
+    types: opened
+    paths:
+      - "backend/**"
+      - ".github/workflows/backend_codeql.yml"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    strategy:
+      fail-fast: false
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: "1.21"
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: "go"
+          queries: security-and-quality
+      - name: Build
+        run: |
+          cd ./backend/ && go build -o backend src/main.go
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:go"

.github/workflows/cli.yml

@@ -0,0 +1,63 @@
+name: CLI
+
+on:
+  push:
+    paths:
+      - "cli/**"
+      - ".github/workflows/cli.yml"
+  pull_request:
+    types: opened
+    paths:
+      - "cli/**"
+      - ".github/workflows/cli.yml"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  format:
+    name: Format
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: "1.21"
+      - name: Cache Go Modules
+        uses: actions/cache@v3
+        with:
+          path: ~/go/pkg/mod
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+      - name: Install gofumpt
+        run: go install mvdan.cc/gofumpt@latest
+      - name: Check code formatting
+        run: |
+          unformatted_files=$(gofumpt -l ./cli/)
+          if [ -n "$unformatted_files" ]; then
+            echo "Files not formatted:"
+            echo "$unformatted_files"
+            exit 1
+          fi
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      checks: write
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v4
+        with:
+          go-version: "1.21"
+          cache: false
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v3
+        with:
+          version: latest
+          working-directory: ./cli/

.github/workflows/cli_codeql.yml

@@ -0,0 +1,44 @@
+name: CLI CodeQL
+
+on:
+  push:
+    paths:
+      - "cli/**"
+      - ".github/workflows/cli_codeql.yml"
+  pull_request:
+    types: opened
+    paths:
+      - "cli/**"
+      - ".github/workflows/cli_codeql.yml"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    strategy:
+      fail-fast: false
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: "1.21"
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: "go"
+          queries: security-and-quality
+      - name: Build
+        run: |
+          cd ./cli/ && go build -o cli main.go
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:go"

.github/workflows/mobile_codeql.yml

@@ -0,0 +1,41 @@
+name: Mobile CodeQL
+
+on:
+  push:
+    paths:
+      - "frontend/sac-mobile/**"
+      - ".github/workflows/mobile_codeql.yml"
+  pull_request:
+    types: opened
+    paths:
+      - "frontend/sac-mobile/**"
+      - ".github/workflows/mobile_codeql.yml"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    strategy:
+      fail-fast: false
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: "javascript-typescript"
+          queries: security-and-quality
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+        with:
+          working-directory: frontend/sac-mobile
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:javascript-typescript"