ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  build-and-test:
    permissions:
      contents: read
    runs-on: ubuntu-latest
    timeout-minutes: 15

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup .NET 10
        uses: actions/setup-dotnet@v4
        with:
          dotnet-version: '10.0.x'

      - name: Restore
        run: dotnet restore CargoAPI.sln

      - name: Build
        run: dotnet build CargoAPI.sln --configuration Release --no-restore

      - name: Test
        run: dotnet test CargoAPI.Tests/CargoAPI.Tests.csproj --configuration Release --no-build --verbosity normal

      - name: Create ephemeral SQL Server password for compose validation
        shell: bash
        run: |
          password="Aa1!$(openssl rand -hex 24)"
          echo "::add-mask::$password"
          echo "MSSQL_SA_PASSWORD=$password" >> "$GITHUB_ENV"

      - name: Validate Docker Compose configuration
        run: docker compose config --quiet

      - name: Build API container image
        run: docker build --tag cargoapi:ci .