test.yml

name: CI

on:
  push:
    branches:
      - master
  pull_request_target:
    branches:
      - master

jobs:
  test:
    runs-on: ubuntu-latest

    permissions:
      pull-requests: write

    steps:
    - name: Checkout repository
      uses: actions/checkout@v6

    - name: Set up Python
      uses: actions/setup-python@v6
      with:
        python-version: '3.x'

    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        pip install -r requirements.pip

    - name: Check Docker Hub Status
      uses: crazy-max/ghaction-docker-status@v4
      with:
        overall_threshold: degraded_performance
        authentication_threshold: service_disruption
        hub_registry_threshold: service_disruption

    - name: Log in to DockerHub
      uses: docker/login-action@v4.1.0
      with:
        username: ${{ secrets.DOCKER_USERNAME }}
        password: ${{ secrets.DOCKER_PASSWORD }}
        ecr: auto
        logout: true

    - name: Verify Docker Login
      run: docker info

    - name: Build and Push Docker image
      uses: docker/build-push-action@v7
      with:
        context: .
        file: ./Dockerfile
        push: true
        tags: ${{ secrets.DOCKER_USERNAME }}/${{ secrets.DOCKER_IMAGE }}:latest
        secrets: |
          DOCKER_IMAGE=${{ secrets.DOCKER_IMAGE }}

    - name: Pull Docker Image
      run: docker pull ${{ secrets.DOCKER_USERNAME }}/${{ secrets.DOCKER_IMAGE }}:latest

    - name: Docker Scout
      id: docker-scout
      uses: docker/scout-action@v1.20.4
      with:
        command: cves,recommendations,compare
        image: ${{ secrets.DOCKER_USERNAME }}/${{ secrets.DOCKER_IMAGE }}:latest
        to-latest: true
        ignore-base: true
        ignore-unchanged: true
        only-fixed: true
        organization: ${{ secrets.DOCKER_USERNAME }}
        summary: true
        format: json
        github-token: ${{ secrets.GITHUB_TOKEN }}
        write-comment: true

    - name: Run tests
      run: python -m unittest discover