test.yml

name: Test

on:
  push:
    branches:
      - master
  pull_request:

permissions:
  contents: read

jobs:
  build:
    name: Build checks
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
    - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
    - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
      with:
        path: ~/.npm
        key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
        restore-keys: |
          ${{ runner.os }}-node-
    - name: Install
      run: npm ci
    - name: Build & Verify
      run: npm run build && git diff --exit-code

  lint:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
    - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
    - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
      with:

        path: ~/.npm
        key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
        restore-keys: |
          ${{ runner.os }}-node-
    - run: npm ci
    - run: npm run lint

  unit:
    name: Unit tests
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
    - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
    - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
      with:
        path: ~/.npm
        key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
        restore-keys: |
          ${{ runner.os }}-node-
    - name: Install
      run: npm ci
    - name: Test
      run: npm test
      env:
        INPUT_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  integration:
    name: Integration test

    strategy:
      matrix:
        os:
          - ubuntu-latest
          - windows-latest

    runs-on: ${{ matrix.os }}

    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
    - name: Use Action
      uses: ./
      with:
        github_token: ${{ secrets.GITHUB_TOKEN }}
    - name: Validate
      run: tflint -v

  integration-versions:
    name: 'Integration test: version (tflint_version: ${{ matrix.tflint_version }})'
    runs-on: ubuntu-latest
    strategy:
      matrix:
        tflint_version: ['v0.24.1', latest]

    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
    - name: Use Action
      id: setup-tflint
      uses: ./
      with:
        tflint_version: ${{ matrix.tflint_version }}
        github_token: ${{ secrets.GITHUB_TOKEN }}
    - name: Validate
      if: matrix.tflint_version != 'latest'
      run: |-
        version='${{ matrix.tflint_version }}'
        tflint -v | grep ${version:1}
    - name: Validate
      if: matrix.tflint_version == 'latest'
      run: tflint -v
    - name: Verify version output
      run: |
        if [[ "${{ matrix.tflint_version }}" == "latest" ]]; then
          expected=$(gh api repos/terraform-linters/tflint/releases/latest --jq '.tag_name' | sed 's/^v//')
        else
          version='${{ matrix.tflint_version }}'
          expected=${version:1}
        fi
        if [[ "${{ steps.setup-tflint.outputs.tflint-version }}" != "$expected" ]]; then
          echo "Expected version output '$expected', got '${{ steps.setup-tflint.outputs.tflint-version }}'"
          exit 1
        fi
      env:
        GH_TOKEN: ${{ github.token }}

  integration-checksum:
    runs-on: ubuntu-latest
    name: 'Integration test: checksum'

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Use Action
        uses: ./
        with:
          tflint_version: 'v0.53.0'
          # https://github.com/terraform-linters/tflint/releases/tag/v0.53.0
          # checksums.txt
          # tflint_linux_amd64
          checksums: bb0a3a6043ea1bcd221fc95d49bac831bb511eb31946ca6a4050983e9e584578
      - run: tflint -v

  integration-matchers:
    name: 'Integration test: matchers (tflint_version: ${{ matrix.tflint_version }})'
    runs-on: ubuntu-latest
    strategy:
      matrix:
        tflint_version: ['v0.26.0', latest]

    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
    - name: Use Action
      uses: ./
      with:
        tflint_version: ${{ matrix.tflint_version }}
        github_token: ${{ secrets.GITHUB_TOKEN }}
    - name: Run
      run: tflint -f compact --force

  integration-wrapper:
    name: 'Integration test: wrapper (tflint_version: ${{ matrix.tflint_version }})'
    runs-on: ubuntu-latest
    strategy:
      matrix:
        tflint_version: [ 'v0.26.0', latest ]

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Use Action
        id: setup-tflint
        uses: ./
        with:
          tflint_version: ${{ matrix.tflint_version }}
          tflint_wrapper: true
          github_token: ${{ secrets.GITHUB_TOKEN }}
      - name: Run
        id: tflint
        run: tflint -f compact --force
      - name: Verify Exit Code Output
        run: |
          if [[ ${{ steps.tflint.outputs.exitcode }} -ne 0 ]]; then
            echo "TFLint Exit Code not captured."
            exit 1
          else
            echo "TFLint Exit Code captured."
          fi
      - name: Verify Version Output
        run: |
          if [[ -z "${{ steps.setup-tflint.outputs.tflint-version }}" ]]; then
            echo "TFLint version output not captured."
            exit 1
          else
            echo "TFLint version captured: ${{ steps.setup-tflint.outputs.tflint-version }}"
          fi

  integration-cache:
    name: 'Integration test: cache'
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Use Action
        uses: ./
        with:
          cache: true
          tflint_config_path: .github/workflows/fixtures/.tflint.hcl
          github_token: ${{ secrets.GITHUB_TOKEN }}
      - name: Init TFLint
        run: tflint --init --config .github/workflows/fixtures/.tflint.hcl
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Verify plugin installed
        run: test -d ~/.tflint.d/plugins