codehealth.yml

name: "Code Health Checks"

on:
  push:
  pull_request:

jobs:
  analyze:
    name: "Code Health Checks"
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22.4.1
          check-latest: true

      - name: Use terraform
        uses: hashicorp/setup-terraform@v3

      - name: Install packages
        working-directory: cloudrun-malware-scanner/
        run: npm install

      - name: Check ESlint
        working-directory: cloudrun-malware-scanner/
        run: npm run eslint

      - name: Check Format
        working-directory: cloudrun-malware-scanner/
        run: npm run check-format

      - name: Typescript checks
        working-directory: cloudrun-malware-scanner/
        run: npm run typecheck

      - name: NPM Audit
        working-directory: cloudrun-malware-scanner/
        run: npm audit

      - name: terraform validate infra
        working-directory: terraform/infra/
        run: |
          terraform init -no-color -input=false
          terraform validate -no-color

      - name: terraform validate service
        working-directory: terraform/service/
        run: |
          terraform init -no-color -input=false
          terraform validate -no-color