cgl.yaml

name: CGL
on:
  push:
    branches:
      - main
      - 'renovate/**'
  pull_request:
    branches:
      - main

jobs:
  cgl:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      # Prepare environment
      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: 8.4
          tools: composer:v2, composer-require-checker, composer-unused
          coverage: none
      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: 'npm'

      # Validation
      - name: Validate composer.json
        run: composer validate

      # Install dependencies
      - name: Install Composer dependencies
        uses: ramsey/composer-install@v3
      - name: Install node modules
        run: npm ci

      # Audit packages
      - name: Audit Composer dependencies
        run: composer audit
      - name: Audit Frontend dependencies
        run: npm audit

      # Check dependencies
      - name: Check dependencies
        run: composer-require-checker check
      - name: Check for unused Composer dependencies
        run: composer-unused
      - name: Check for unused Frontend dependencies
        run: npm run check-dependencies

      # Linting
      - name: Lint composer.json
        run: composer lint:composer
      - name: Lint PHP
        run: composer lint:php
        env:
          # @todo Remove once PHP-CS-Fixer supports PHP 8.4
          PHP_CS_FIXER_IGNORE_ENV: 1
      - name: Lint CSS
        run: npm run lint:css
      - name: Lint JavaScript
        run: npm run lint:js

      # SCA
      - name: SCA PHP
        run: composer sca -- --error-format github

      # Migration
      - name: Rector migration
        run: composer migration -- --dry-run

      # Symfony recipes
      - name: Check symfony recipes
        run: composer recipes --outdated