build.yml

name: Maksut

on:
  workflow_dispatch:
  push:
    paths-ignore:
      - '**.md'

permissions:
  id-token: write
  contents: read

jobs:
  test-and-build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: lts/*

      - name: Prepare clojure env
        uses: ./.github/actions/prepare-clojure-env

      - name: Set up Next env
        uses: ./.github/actions/setup-next-env

      - name: Lint maksut-ui
        run: |
          cd src/maksut-ui
          npm run lint

      - name: Run tests and build uberjar
        env:
          ARTIFACTORY_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }}
          ARTIFACTORY_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }}
          GA_BUILD_NUMBER: ${{ github.run_number }}
        run: |
          git clone https://github.com/Opetushallitus/ci-tools.git
          source ci-tools/common/setup-tools.sh
          npm install
          npx playwright install --with-deps chromium
          ./bin/cibuild.sh run-all-tests-and-create-uberjar
          bin/lein with-profile prod uberjar

      - uses: actions/cache@v4
        id: restore-build
        with:
          path: target
          key: ${{ github.sha }}

  deploy-container:
    needs: [ test-and-build ]
    uses: Opetushallitus/.github/.github/workflows/push-scan-java-ecr.yml@main
    with:
      application: maksut
      base-image: baseimage-fatjar-openjdk21:master
      configfolder: oph-configuration
      jarfile: maksut
    secrets:
      AWS_UTILITY_ROLE_ARN: ${{ secrets.AWS_OPH_UTILITY_ROLE_ARN }}