ci.yaml

on:
  push:
    branches:
      - main
  pull_request:
    types: [opened, synchronize, reopened]

name: ci

jobs:
  sonarqube:
    name: SonarQube
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: SonarQube Scan
        uses: SonarSource/sonarqube-scan-action@v4
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

  prettier:
    name: Prettier
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 18

      - name: Install Prettier
        run: npm install --global prettier

      - name: Format YAML files
        run: prettier --write "**/*.yaml"

      - name: Commit changes
        run: |
          git config --global user.name 'github-actions'
          git config --global user.email 'github-actions@github.com'
          if [ -n "$(git status --porcelain)" ]; then
            git add .
            git commit -m 'Format YAML files'
          else
            echo "No changes to commit"
          fi
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          commit-message: "Fix formatting issues"
          branch: prettier-fix
          branch-suffix: short-commit-hash
          title: "Prettier: Fix formatting issues"
          body: |
            Fix prettier formattin issues

  checkov:
    name: checkov
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Checkov GitHub Action
        uses: bridgecrewio/checkov-action@v12
        with:
          directory: .
          quiet: true
          framework: kustomize
          soft_fail: true