ci.yml

name: CI

on:
  pull_request:
  push:
    branches:
      - main
      - master
  workflow_dispatch:

permissions:
  contents: read

env:
  DOTNET_VERSION: 10.0.x
  SOLUTION_PATH: src/PictureSortAndDuplicateCleaner.slnx
  GITLEAKS_VERSION: v8.30.1

jobs:
  build:
    name: Build and test
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v6.0.2

      - name: Setup .NET
        uses: actions/setup-dotnet@v5.2.0
        with:
          dotnet-version: ${{ env.DOTNET_VERSION }}

      - name: Restore
        run: dotnet restore "${{ env.SOLUTION_PATH }}"

      - name: Build
        run: dotnet build "${{ env.SOLUTION_PATH }}" --configuration Release --no-restore

      - name: Test
        run: dotnet test "${{ env.SOLUTION_PATH }}" --configuration Release --no-build --verbosity normal

  secret-scan:
    name: Secret scan
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v6.0.2
        with:
          fetch-depth: 0

      - name: Install Gitleaks
        shell: bash
        run: |
          curl -sSfL "https://github.com/gitleaks/gitleaks/releases/download/${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION#v}_linux_x64.tar.gz" -o gitleaks.tar.gz
          tar -xzf gitleaks.tar.gz gitleaks
          sudo install -m 755 gitleaks /usr/local/bin/gitleaks

      - name: Run Gitleaks
        run: gitleaks detect --source . --redact --verbose