continuous-integration.yml

name: Continuous Integration

on:
  push:
    branches:
      - main

  pull_request:
    branches:
      - main

  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

env:
  DOTNET_CLI_TELEMETRY_OPTOUT: "true"
  DOTNET_NOLOGO: "true"
  NUGET_XMLDOC_MODE: skip
  # Start at the project's current baseline and raise these gradually.
  MINIMUM_LINE_COVERAGE: "10"
  MINIMUM_BRANCH_COVERAGE: "10"

jobs:
  quality_gate:
    name: Quality Gate (.NET 10)
    runs-on: ubuntu-24.04
    timeout-minutes: 15

    steps:
      - name: Check out repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - name: Set up .NET SDK
        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
        with:
          global-json-file: ./global.json

      - name: Display .NET environment
        run: dotnet --info

      - name: Run formatting, build, tests, and coverage
        shell: pwsh
        run: ./scripts/Invoke-ProjectQualityCheck.ps1 -VerifyNoChanges

      - name: Publish coverage summary and enforce baseline
        shell: pwsh
        run: |
          $coverageFile = Join-Path $env:GITHUB_WORKSPACE "CoverageReport/Cobertura.xml"
          $summaryFile = Join-Path $env:GITHUB_WORKSPACE "CoverageReport/SummaryGithub.md"

          if (-not (Test-Path $coverageFile)) {
              throw "Merged coverage report was not found: $coverageFile"
          }

          [xml] $coverageReport = Get-Content -Path $coverageFile -Raw
          $invariantCulture = [System.Globalization.CultureInfo]::InvariantCulture

          $lineRate = [double]::Parse(
              [string] $coverageReport.coverage.'line-rate',
              $invariantCulture)

          $branchRate = [double]::Parse(
              [string] $coverageReport.coverage.'branch-rate',
              $invariantCulture)

          $lineCoverage = [Math]::Round($lineRate * 100, 2)
          $branchCoverage = [Math]::Round($branchRate * 100, 2)

          $minimumLineCoverage = [double]::Parse(
              $env:MINIMUM_LINE_COVERAGE,
              $invariantCulture)

          $minimumBranchCoverage = [double]::Parse(
              $env:MINIMUM_BRANCH_COVERAGE,
              $invariantCulture)

          if (Test-Path $summaryFile) {
              Get-Content -Path $summaryFile -Raw |
                  Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Encoding utf8 -Append
          }
          else {
              $fallbackSummary = @(
                  "## Code coverage",
                  "",
                  "| Metric | Result | Required |",
                  "|---|---:|---:|",
                  "| Line coverage | $lineCoverage% | $minimumLineCoverage% |",
                  "| Branch coverage | $branchCoverage% | $minimumBranchCoverage% |"
              ) -join [Environment]::NewLine

              $fallbackSummary |
                  Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Encoding utf8 -Append
          }

          Write-Host "Line coverage: $lineCoverage% (minimum $minimumLineCoverage%)"
          Write-Host "Branch coverage: $branchCoverage% (minimum $minimumBranchCoverage%)"

          $coverageFailures = [System.Collections.Generic.List[string]]::new()

          if ($lineCoverage -lt $minimumLineCoverage) {
              $coverageFailures.Add(
                  "Line coverage $lineCoverage% is below $minimumLineCoverage%.")
          }

          if ($branchCoverage -lt $minimumBranchCoverage) {
              $coverageFailures.Add(
                  "Branch coverage $branchCoverage% is below $minimumBranchCoverage%.")
          }

          if ($coverageFailures.Count -gt 0) {
              throw ($coverageFailures -join " ")
          }

      - name: Upload test and coverage reports
        if: always()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: quality-results
          path: |
            TestResults/**/*
            CoverageReport/**/*
          if-no-files-found: warn
          retention-days: 14
          compression-level: 6