From 98b954196b0a512e68f11ebca3d128d79b820596 Mon Sep 17 00:00:00 2001
From: nutcas3 <mauricee423@gmail.com>
Date: Mon, 20 Apr 2026 20:08:44 +0300
Subject: [PATCH] feat: Add GitHub Actions CI workflow with testing, building,
 and security scanning

- Add CI workflow triggered on push/PR to main/develop branches
- Add api-server-test job with PostgreSQL service, Go 1.23 setup, golangci-lint, race detection tests with coverage, and binary build
- Add web-dashboard-test job with Node.js 20 setup, npm ci, linting, TypeScript type checking, and build
- Add docker-build job (main branch only) with Buildx setup, API server/web dashboard image builds, and GitHub Actions
---
 .github/workflows/ci.yml | 152 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 152 insertions(+)
 create mode 100644 .github/workflows/ci.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..95d5d46
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,152 @@
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+jobs:
+  api-server-test:
+    name: API Server Tests
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:15
+        env:
+          POSTGRES_USER: test_user
+          POSTGRES_PASSWORD: test_password
+          POSTGRES_DB: test_db
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.23'
+          cache: true
+          cache-dependency-path: apps/api-server/go.sum
+
+      - name: Install dependencies
+        working-directory: apps/api-server
+        run: go mod download
+
+      - name: Run linter
+        working-directory: apps/api-server
+        run: |
+          go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
+          golangci-lint run --timeout 5m || true
+
+      - name: Run tests
+        working-directory: apps/api-server
+        env:
+          DB_HOST: localhost
+          DB_PORT: 5432
+          DB_USER: test_user
+          DB_PASSWORD: test_password
+          DB_NAME: test_db
+        run: |
+          go test -v -race -coverprofile=coverage.out ./...
+
+      - name: Upload coverage
+        uses: codecov/codecov-action@v4
+        with:
+          files: apps/api-server/coverage.out
+          flags: api-server
+        continue-on-error: true
+
+      - name: Build API server
+        working-directory: apps/api-server
+        run: go build -o bin/api-server ./cmd/server.go
+
+  web-dashboard-test:
+    name: Web Dashboard Tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+          cache-dependency-path: apps/web-dashboard/package-lock.json
+
+      - name: Install dependencies
+        working-directory: apps/web-dashboard
+        run: npm ci
+
+      - name: Run linter
+        working-directory: apps/web-dashboard
+        run: npm run lint || true
+
+      - name: Run type check
+        working-directory: apps/web-dashboard
+        run: npx tsc --noEmit || true
+
+      - name: Build
+        working-directory: apps/web-dashboard
+        run: npm run build
+
+  docker-build:
+    name: Docker Build
+    runs-on: ubuntu-latest
+    needs: [api-server-test, web-dashboard-test]
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build API server image
+        uses: docker/build-push-action@v5
+        with:
+          context: ./apps/api-server
+          push: false
+          tags: telecom-platform/api-server:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Build web dashboard image
+        uses: docker/build-push-action@v5
+        with:
+          context: ./apps/web-dashboard
+          push: false
+          tags: telecom-platform/web-dashboard:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  security-scan:
+    name: Security Scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: 'fs'
+          scan-ref: '.'
+          format: 'sarif'
+          output: 'trivy-results.sarif'
+        continue-on-error: true
+
+      - name: Upload Trivy scan results
+        uses: github/codeql-action/upload-sarif@v3
+        if: always()
+        with:
+          sarif_file: 'trivy-results.sarif'
+        continue-on-error: true