IETM_FIXE\ietm6
42c4b53ced
Some checks failed
Qualité & Sécurité / MegaLinter (PMD · Ruff · Bandit · gitleaks · hadolint) (push) Successful in 1m9s
Build & Push Images / build (brain) (push) Successful in 1m10s
Qualité & Sécurité / Trivy (CVE dépendances Maven / pip / npm) (push) Failing after 2m36s
Build & Push Images / build (web) (push) Successful in 1m48s
Build & Push Images / build-switcher (push) Successful in 20s
Build & Push Images / build (core) (push) Successful in 3m9s
Qualité & Sécurité / Web (ESLint · angular-eslint + sonarjs) (push) Successful in 38s
CI (Gitea Actions) : - Nouveau workflow quality.yml (séparé de ci.yml, non bloquant pour la release) : MegaLinter v9 (PMD, Ruff, Bandit, gitleaks, hadolint), ng lint (web) et Trivy (CVE des dépendances Maven/pip/npm), sur main + beta + PR - Trivy : préchargement du cache Maven avant le scan — sans ça Maven Central rate-limite l'IP du runner (429) en résolvant les BOMs du parent Spring Boot - upload-artifact v4 → v3 : l'API artifacts v4 n'est pas supportée par Gitea (corrige aussi l'upload du rapport Playwright de e2e.yml, cassé depuis toujours) - Ruleset PMD projet (java-pmd-ruleset.xml, auto-détecté par MegaLinter) orienté bugs réels, sans le style Lombok-hostile du défaut : 11 337 → 65 findings ; PMD en mode rapport (JAVA_PMD_DISABLE_ERRORS) le temps de purger ce backlog Web : - angular-eslint 21 + eslint-plugin-sonarjs : les règles Sonar vivent désormais dans ESLint (config web/eslint.config.js, réglages justifiés en commentaire) - tsconfig : skipLibCheck + types:[] + node_modules ré-exclu — répare les builds desktop Windows/Linux cassés par le conflit @types/eslint-scope vs ESLint 9 - Purge du backlog lint : 114 erreurs → 0 sur 66 fichiers (ngOnDestroy vides supprimés, any typés avec les vrais DTOs, outputs (close) → (closed), regex super-linéaires désamorcées, ternaires/fonctions imbriqués dépliés, intention documentée sur les catch/error volontairement vides) - Bug latent corrigé au passage : license.service.disconnect() émettait undefined au lieu de true en cas de succès (masqué par un double cast)
98 lines
2.8 KiB
YAML
98 lines
2.8 KiB
YAML
name: E2E Tests
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
e2e:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: '20'
|
|
cache: 'npm'
|
|
cache-dependency-path: web/package-lock.json
|
|
|
|
- name: Create .env for stack
|
|
run: |
|
|
cat > .env <<'EOF'
|
|
POSTGRES_PASSWORD=ci-postgres-pass
|
|
BRAIN_INTERNAL_SECRET=ci-brain-secret
|
|
ADMIN_USERNAME=admin
|
|
ADMIN_PASSWORD=ci-admin-pass
|
|
WEB_PORT=8081
|
|
LLM_PROVIDER=ollama
|
|
EOF
|
|
|
|
- name: Build & start stack
|
|
run: |
|
|
docker compose -f docker-compose.yml -f docker-compose.e2e.yml up -d --build
|
|
|
|
- name: Attach runner to compose network
|
|
run: |
|
|
NET=$(docker network ls --format '{{.Name}}' | grep -E '(^|_)loremind(_|$)' | grep -i default | head -1)
|
|
if [ -z "$NET" ]; then
|
|
echo "Compose network not found" >&2
|
|
docker network ls
|
|
exit 1
|
|
fi
|
|
echo "Connecting $(hostname) to network $NET"
|
|
docker network connect "$NET" "$(hostname)"
|
|
|
|
- name: Wait for web to be ready
|
|
run: |
|
|
timeout 180 bash -c 'until curl -sf http://web/ > /dev/null; do echo "waiting..."; sleep 3; done'
|
|
|
|
- name: Install web deps
|
|
working-directory: web
|
|
run: npm ci
|
|
|
|
- name: Work around runner clock skew for apt
|
|
run: |
|
|
sudo tee /etc/apt/apt.conf.d/99no-check-valid-until >/dev/null <<'EOF'
|
|
Acquire::Check-Valid-Until "false";
|
|
Acquire::Check-Date "false";
|
|
EOF
|
|
|
|
- name: Install Playwright browsers
|
|
working-directory: web
|
|
run: npx playwright install --with-deps chromium
|
|
|
|
- name: Run Playwright tests
|
|
working-directory: web
|
|
env:
|
|
E2E_BASE_URL: http://web
|
|
CI: 'true'
|
|
run: npm run e2e
|
|
|
|
- name: Dump container logs on failure
|
|
if: failure()
|
|
run: docker compose -f docker-compose.yml -f docker-compose.e2e.yml logs --no-color
|
|
|
|
# v3 obligatoire : l'API artifacts v4 n'est pas supportée par Gitea
|
|
# (GHESNotSupportedError — constaté sur le job MegaLinter).
|
|
- name: Upload Playwright report
|
|
if: always()
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: playwright-report
|
|
path: web/playwright-report/
|
|
retention-days: 14
|
|
|
|
- name: Stop stack
|
|
if: always()
|
|
run: docker compose -f docker-compose.yml -f docker-compose.e2e.yml down -v
|