main.yml

on:
    workflow_dispatch:
    push:
      branches:
        - main
      tags:
        - 'v[0-9]+.[0-9]+.[0-9]+*'  # match basic semver tags
    pull_request:
      types: 
        - opened
        - reopened
        - synchronize
      branches:
        - main
        - 'release-*'
  
jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Lint Shell Scripts
        continue-on-error: true
        run: |
          sudo apt-get update
          sudo apt-get install shellcheck
          shellcheck **/*.sh
  
      - name: Lint PowerShell Scripts
        continue-on-error: true
        run: |
          pwsh -Command "Invoke-ScriptAnalyzer -EnableExit -Recurse -Path ."
  
      - name: Lint Lua
        continue-on-error: true
        run: |
          sudo apt-get install -y luarocks
          sudo luarocks install luacheck
          luacheck **/*.lua
  
      - name: Lint TeX Files
        continue-on-error: true
        run: |
          sudo apt-get install chktex
          chktex **/*.tex

      - name: Lint YAML Files
        continue-on-error: true
        run: |
          sudo apt-get update
          sudo apt-get install yamllint
          yamllint -f parsable **/*.yml
          
  semgrep-scan:
    runs-on: ubuntu-latest
    container: 
      image: returntocorp/semgrep:latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Semgrep Scan
        continue-on-error: true
        run: |
          semgrep --config "p/r2c" .

  build-release:
    if: startsWith(github.head_ref, 'release')
    #if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    needs: [lint, semgrep-scan]
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Get release version
        id: version
        run: |
          echo "version=${GITHUB_HEAD_REF##*-}" >> $GITHUB_ENV

      - name: Get current date 
        id: date
        run: | 
          echo "date=$(date +'%Y-%m-%d')" >> $GITHUB_ENV

      - name: Build Assets
        run: git ls-files | zip LME-${{ env.version }}.zip -@

      - name: Build Changelog
        id: release
        uses: mikepenz/release-changelog-builder-action@v4.1.1
        with: 
          #fromTag: ${{ github.head_ref }}
          toTag: ${{ github.head_ref }} # ${{ github.ref }}
          configurationJson: |
            {
              "template": "#{{CHANGELOG}}",
              "pr_template": "- #{{TITLE}} ##{{NUMBER}}",
              "categories": [
                {
                    "title": "## What's Added",
                    "labels": ["feat"]
                },
                {
                    "title": "## What's Fixed",
                    "labels": ["fix"]
                },
                {
                    "title": "## What's Updated",
                    "labels": ["update"]
                },
                {
                    "title": "## Uncategorized PRs",
                    "labels": []
                }
              ],
              "duplicate_filter": {
                "pattern": "\\[ABC-....\\]",
                "on_property": "title",
                "method": "match"
              },
              "reference": {
                "pattern": ".*\\ \\#(.).*",
                "on_property": "body",
                "method": "replace",
                "target": "$1"
              },
            }
          # commitMode: true
          failOnError: true
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        
      - name: Create Draft Release 
        uses: softprops/action-gh-release@v0.1.15
        with:
          name: "LME v${{ env.version }}"
          tag_name: "v${{ env.version }}"
          append_body: true
          body: |
            ## [${{ env.version }}] - Timberrrrr! - ${{ env.date }} 
            ${{ steps.release.outputs.changelog }}
          files: LME-${{ env.version }}.zip
          draft: true
          prerelease: false
          discussion_category_name: "Announcements"
          generate_release_notes: false
          fail_on_unmatched_files: true
          token: ${{ secrets.GITHUB_TOKEN }}