Merge branch 'main' into SAC-25-Membership-CRUD

.github/workflows/auto_assign_author.yml

@@ -2,7 +2,11 @@ name: Auto Assign Author
 
 on:
   pull_request:
-    types: [opened, ready_for_review, reopened]
+    types: [opened, reopened]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   auto-add-assignee:

.github/workflows/auto_request_review.yml

@@ -2,8 +2,11 @@ name: Auto Request Review
 
 on:
   pull_request:
-    types: [opened, ready_for_review, reopened]
+    types: [opened, reopened]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 jobs:
   auto-request-review:
     runs-on: ubuntu-latest

.github/workflows/go.yml → .github/workflows/backend.yml

@@ -1,16 +1,15 @@
-name: Go
+name: Backend
 
 on:
   push:
-    branches:
-      - main
     paths:
       - "backend/**"
-      - ".github/workflows/go.yml"
+      - ".github/workflows/backend.yml"
   pull_request:
+    types: opened
     paths:
       - "backend/**"
-      - ".github/workflows/go.yml"
+      - ".github/workflows/backend.yml"
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -27,28 +26,41 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: "1.21"
-      - name: Enforce formatting
-        run: gofmt -l ./backend/ | grep ".go$" | xargs -r echo "Files not formatted:"
-
+      - name: Cache Go Modules
+        uses: actions/cache@v3
+        with:
+          path: ~/go/pkg/mod
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+      - name: Install gofumpt
+        run: go install mvdan.cc/gofumpt@latest
+      - name: Check code formatting
+        run: |
+          unformatted_files=$(gofumpt -l ./backend/)
+          if [ -n "$unformatted_files" ]; then
+            echo "Files not formatted:"
+            echo "$unformatted_files"
+            exit 1
+          fi
   lint:
     name: Lint
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      checks: write
     steps:
-      - name: Checkout Repository
-        uses: actions/checkout@v3
-      - name: Set up Go
-        uses: actions/setup-go@v3
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v4
         with:
           go-version: "1.21"
-      - name: Enforce linting
-        run: |
-          cd ./backend/ && lint_output=$(go vet ./...)
-          if [[ -n "$lint_output" ]]; then
-            echo "$lint_output"
-            echo "::error::Linting issues found"
-            exit 1
-          fi
-
+          cache: false
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v3
+        with:
+          version: latest
+          working-directory: ./backend/
   test:
     name: Test
     runs-on: ubuntu-latest
@@ -68,6 +80,13 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: "1.21"
+      - name: Cache Go Modules
+        uses: actions/cache@v3
+        with:
+          path: ~/go/pkg/mod
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
       - name: Install Dependencies
         run: cd ./backend/ && go get ./...
       - name: Increase max_connections in PostgreSQL
@@ -77,9 +96,7 @@ jobs:
           docker exec $CONTAINER_ID cat /var/lib/postgresql/data/postgresql.conf | grep max_connections
       - name: Restart PostgreSQL Container
         run: docker restart $(docker ps --filter "publish=5432" --format "{{.ID}}")
-      - name: Migrate DB
-        run: cd ./backend/src && go run main.go --only-migrate
       - name: Run Tests with Coverage
-        run: cd ./backend/ && go test -failfast -benchmem -race -coverprofile=coverage.txt ./...
+        run: cd ./backend/ && go test -bench=. -benchmem -race -coverprofile=coverage.txt ./...
       - name: Print Coverage
         run: cd ./backend/ && go tool cover -func=coverage.txt

.github/workflows/backend_codeql.yml

@@ -0,0 +1,44 @@
+name: Backend CodeQL
+
+on:
+  push:
+    paths:
+      - "backend/**"
+      - ".github/workflows/backend_codeql.yml"
+  pull_request:
+    types: opened
+    paths:
+      - "backend/**"
+      - ".github/workflows/backend_codeql.yml"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    strategy:
+      fail-fast: false
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: "1.21"
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: "go"
+          queries: security-and-quality
+      - name: Build
+        run: |
+          cd ./backend/ && go build -o backend src/main.go
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:go"

.github/workflows/cli.yml

@@ -0,0 +1,63 @@
+name: CLI
+
+on:
+  push:
+    paths:
+      - "cli/**"
+      - ".github/workflows/cli.yml"
+  pull_request:
+    types: opened
+    paths:
+      - "cli/**"
+      - ".github/workflows/cli.yml"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  format:
+    name: Format
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: "1.21"
+      - name: Cache Go Modules
+        uses: actions/cache@v3
+        with:
+          path: ~/go/pkg/mod
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+      - name: Install gofumpt
+        run: go install mvdan.cc/gofumpt@latest
+      - name: Check code formatting
+        run: |
+          unformatted_files=$(gofumpt -l ./cli/)
+          if [ -n "$unformatted_files" ]; then
+            echo "Files not formatted:"
+            echo "$unformatted_files"
+            exit 1
+          fi
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      checks: write
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v4
+        with:
+          go-version: "1.21"
+          cache: false
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v3
+        with:
+          version: latest
+          working-directory: ./cli/

.github/workflows/cli_codeql.yml

@@ -0,0 +1,44 @@
+name: CLI CodeQL
+
+on:
+  push:
+    paths:
+      - "cli/**"
+      - ".github/workflows/cli_codeql.yml"
+  pull_request:
+    types: opened
+    paths:
+      - "cli/**"
+      - ".github/workflows/cli_codeql.yml"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    strategy:
+      fail-fast: false
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: "1.21"
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: "go"
+          queries: security-and-quality
+      - name: Build
+        run: |
+          cd ./cli/ && go build -o cli main.go
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:go"