on_pr_push.yml

name: On push
on: [push, pull_request]
jobs:
  test:
    name: Test on Ubuntu
    runs-on: ubuntu-22.04

    services:
      # label used to access the service container
      postgis:
        # docker hub image
        image: postgis/postgis:12-3.0-alpine
        env:
          # set the master password for the instance
          POSTGRES_PASSWORD: postgres
        ports:
          - 5432:5432
        # Set health checks to wait until postgres has started
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5

      redis:
        image: redis
        ports:
          - 6379:6379
        options: --entrypoint redis-server

    steps:
      - name: Check out code
        uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version-file: 'go.mod'

      - name: Env Debug
        run: |
          go env
          pwd
          echo ${HOME}
          echo ${GITHUB_WORKSPACE}

      - name: Load Postgres test data
        env:
          TEST_DATA_URL: https://raw.githubusercontent.com/go-spatial/tegola-testdata/master/tegola.dump
          TEST_DATA: tegola.backup
          PGUSER: postgres
          PGHOST: localhost
          PGDATABASE: postgres
          PGPASSWORD: postgres
        run: |
          curl ${TEST_DATA_URL} > ${TEST_DATA}
          pg_restore -d postgres -C ${TEST_DATA}
          psql -c "CREATE ROLE tegola_no_access LOGIN PASSWORD 'postgres'"
          rm ${TEST_DATA}

      - name: Postgres Debug
        env:
          PGUSER: postgres
          PGHOST: localhost
          PGDATABASE: postgres
          PGPASSWORD: postgres
        run: |
          psql -c "\l"

      - name: Run tests
        env:
          # redis tests
          RUN_REDIS_TESTS: yes

          # AWS S3 tests
          RUN_S3_TESTS: yes
          AWS_TEST_BUCKET: tegola-ci
          AWS_REGION: us-east-2

          # PostGIS tests
          RUN_POSTGIS_TESTS: yes
          PGURI: postgres://postgres:postgres@localhost:5432/tegola
          PGURI_NO_ACCESS: postgres://tegola_no_access:postgres@localhost:5432/tegola
          PGSSLMODE: disable
          PGSSLKEY: ""
          PGSSLCERT: ""
          PGSSLROOTCERT: ""

          # HANA tests
          RUN_HANA_TESTS: yes
          # The credentials were exposed on purpose
          # more information see: https://github.com/go-spatial/tegola/pull/893#discussion_r1136602372
          HANA_CONNECTION_STRING: "hdb://TEGOLACI:iZgd6$nOdhf@917df316-4e01-4a10-be54-eac1b6ab15fb.hana.prod-us10.hanacloud.ondemand.com:443?TLSInsecureSkipVerify&TLSServerName=host&timeout=1000&max_connections=10"
        run: |
          go test -mod vendor -covermode atomic -coverprofile=profile.cov ./...

      - name: Send coverage report to Coveralls
        env:
          COVERALLS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          go install -mod=vendor github.com/mattn/goveralls
          $(go env GOPATH)/bin/goveralls -coverprofile=profile.cov -service=github

      - name: Build embedded UI
        run: |
          pushd ${GITHUB_WORKSPACE}/server
          go generate ./...
          popd

  govulncheck:
    name: Run govulncheck
    runs-on: ubuntu-22.04 
    steps:
    - name: Check out code
      uses: actions/checkout@v4

    - name: Set up Go
      uses: actions/setup-go@v5
      with:
        go-version-file: 'go.mod'

    - name: Install and run go vulncheck
      run: |
        go install golang.org/x/vuln/cmd/govulncheck@latest
        govulncheck ./...