Actions

name: Build & Deploy

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20

      - name: Install dependencies
        run: npm ci

      - name: Build
        run: npm run build

      - name: Run unit tests
        run: npm test

      # TODO: agregar SAST (CodeQL / Semgrep)
      # TODO: agregar SCA (Snyk / Dependabot blocking)
      # TODO: agregar DAST en staging

      - name: Deploy a producción
        if: github.ref == 'refs/heads/main'
        run: |
          aws ecs update-service \
            --cluster omnicontrol-prod \
            --service omnicontrol-erp-api \
            --force-new-deployment
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}