ci.yaml

# Continuous integration
name: CI

# Run in master and dev branches and in all pull requests to those branches
on:
  push:
    branches: [ master, webapi-3.0 ]
  pull_request:
    branches: [ master, webapi-3.0 ]

jobs:
  # Build and test the code
  build:
    # The type of runner that the job will run on
    runs-on: ubuntu-latest

    env:
      MAVEN_PROFILE: webapi-postgresql

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v4

      - uses: actions/setup-java@v4
        with:
            distribution: 'temurin'
            java-version: 21

      - name: Maven cache
        uses: actions/cache@v4
        with:
            # Cache gradle directories
            path: ~/.m2
            # Key for restoring and saving the cache
            key: ${{ runner.os }}-maven-${{ hashFiles('pom.xml') }}
            restore-keys: |
              ${{ runner.os }}-maven-

      - name: Build code
        run: mvn -B -DskipTests=true -DskipUnitTests=true -P${{ env.MAVEN_PROFILE }} package

      - name: Test
        run: mvn -B -P${{ env.MAVEN_PROFILE }} test

  # Check that the docker image builds correctly
  # Push to ghcr.io for commits on master or webapi-3.0.
  docker:
    # The type of runner that the job will run on
    runs-on: ubuntu-latest

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v4

      - name: Set Docker image name
        run: |
          REPO="${GITHUB_REPOSITORY:-ohdsi/webapi}"
          DOCKER_IMAGE="ghcr.io/$(echo "${REPO}" | tr '[:upper:]' '[:lower:]')"
          echo "DOCKER_IMAGE=${DOCKER_IMAGE}" >> $GITHUB_ENV

      - name: Debug Docker image name
        run: echo "DOCKER_IMAGE=${DOCKER_IMAGE}"

      - name: Cache Docker layers
        uses: actions/cache@v4
        with:
          path: /tmp/.buildx-cache
          key: ${{ runner.os }}-buildx-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-buildx-

      # Add Docker labels and tags
      - name: Docker meta
        id: docker_meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ env.DOCKER_IMAGE }}
          tags: |
            type=raw,value=dev,enable=${{ github.ref == 'refs/heads/master' }}
            type=raw,value=3.0-dev,enable=${{ github.ref == 'refs/heads/webapi-3.0' }}
            type=sha,prefix=pr-,enable=${{ github.event_name == 'pull_request' }}
            type=ref,event=branch,prefix=branch-,enable=${{ github.ref != 'refs/heads/master' && github.ref != 'refs/heads/webapi-3.0' }}

      - name: Debug Docker metadata
        run: |
          echo "Docker metadata outputs:"
          echo "version: ${{ steps.docker_meta.outputs.version }}"
          echo "tags: ${{ steps.docker_meta.outputs.tags }}"
          echo "labels: ${{ steps.docker_meta.outputs.labels }}"
          echo "json: ${{ steps.docker_meta.outputs.json }}"

      # Setup docker build environment
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Set build parameters
        id: build_params
        run: |
          echo "sha8=${GITHUB_SHA::8}" >> $GITHUB_OUTPUT
          if [ "${{ github.event_name }}" != "pull_request" ] && ( [ "${{ github.ref }}" == "refs/heads/master" ] || [ "${{ github.ref }}" == "refs/heads/webapi-3.0" ] ); then
            echo "push=true" >> $GITHUB_OUTPUT
            echo "load=false" >> $GITHUB_OUTPUT
            echo "platforms=linux/amd64,linux/arm64" >> $GITHUB_OUTPUT
          else
            echo "push=false" >> $GITHUB_OUTPUT
            echo "load=true" >> $GITHUB_OUTPUT
            echo "platforms=linux/amd64" >> $GITHUB_OUTPUT
          fi

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        if: steps.build_params.outputs.push == 'true'
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push
        id: docker_build
        uses: docker/build-push-action@v5
        with:
          context: ./
          file: ./Dockerfile
          cache-from: type=local,src=/tmp/.buildx-cache
          cache-to: type=local,dest=/tmp/.buildx-cache,mode=max
          platforms: ${{ steps.build_params.outputs.platforms }}
          push: ${{ steps.build_params.outputs.push }}
          load: ${{ steps.build_params.outputs.load }}
          build-args: |
            GIT_BRANCH=${{ steps.docker_meta.outputs.version }}
            GIT_COMMIT_ID_ABBREV=${{ steps.build_params.outputs.sha8 }}
            MAVEN_PROFILE=webapi-docker,tcache
          tags: ${{ steps.docker_meta.outputs.tags }}
          # Use runtime labels from docker_meta as well as fixed labels
          labels: |
            ${{ steps.docker_meta.outputs.labels }}
            maintainer=Joris Borgdorff <joris@thehyve.nl>, Lee Evans - www.ltscomputingllc.com
            org.opencontainers.image.authors=Joris Borgdorff <joris@thehyve.nl>, Lee Evans - www.ltscomputingllc.com
            org.opencontainers.image.vendor=OHDSI
            org.opencontainers.image.licenses=Apache-2.0

      # If the image was pushed, we need to pull it again to inspect it
      - name: Pull image
        if: steps.build_params.outputs.push == 'true'
        run: docker pull ${{ env.DOCKER_IMAGE }}:${{ steps.docker_meta.outputs.version }}

      - name: Inspect image
        run: |
          docker image inspect ${{ env.DOCKER_IMAGE }}:${{ steps.docker_meta.outputs.version }}