django-test-deploy-master.yaml

name: Django Test Deploy Master
on:
  push:
    branches:
      - master
  schedule:
    - cron: "0 3 * * 0-6" # Every day at 3am UTC

env:
  DEBUG: False
  LOGGING: False
  DJANGO_SETTINGS_MODULE: django_project.settings.ci
  USE_SQLITE: True
  SECRET_KEY: "Not applicable for tests"
  ALLOWED_HOSTS: "127.0.0.1 localhost"
  SITE_ID: 1

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v3

      - name: update-system-dependencies
        run: |
          sudo apt-get update -y

      - name: setup-python
        uses: actions/setup-python@v4
        with:
          python-version: 3.10.8
          cache: "pip"

      - name: install-python-virtualenv
        run: |
          python3 -m venv venv django_project/venv
          source django_project/venv/bin/activate
          pip install --upgrade pip
          pip install wheel
          pip install -r django_project/requirements/requirements.txt

      - name: lint-with-ruff
        run: |
          source django_project/venv/bin/activate
          ruff --config ./config/pyproject.toml django_project

      - name: collect-static-files
        run: |
          source django_project/venv/bin/activate 
          python3 django_project/manage.py collectstatic --noinput

      - name: run-db-migrations
        run: |
          source django_project/venv/bin/activate
          python3 django_project/manage.py migrate --noinput

      - name: run-unit-tests-with-coverage
        run: |
          source django_project/venv/bin/activate
          coverage run --rcfile=config/.coveragerc -m pytest django_project
          coverage lcov --rcfile=config/.coveragerc

      - name: coveralls
        uses: coverallsapp/github-action@master
        with:
          github-token: ${{ secrets.github_token }}

  static_analysis:
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
      security-events: write

    strategy:
      fail-fast: false
      matrix:
        language: ["javascript", "python"]

    steps:
      - uses: actions/checkout@v3

      - name: initialize-codeQL
        uses: github/codeql-action/init@v2
        with:
          languages: ${{ matrix.language }}

      - name: perform-codeQL Analysis
        uses: github/codeql-action/analyze@v2

  deploy:
    needs: [build, static_analysis]
    runs-on: ubuntu-latest
    steps:
      - name: deploy-to-linode
        uses: appleboy/ssh-action@master
        with:
          host: ${{ secrets.HOST }}
          username: ${{ secrets.USERNAME }}
          key: ${{ secrets.KEY }}
          script: |
            cd blogthedata
            git pull
            source django_project/venv/bin/activate
            python3 django_project/manage.py collectstatic --noinput
            sudo systemctl restart gunicorn