name: CI

on:
  pull_request:

jobs:
  test-setup-trivy:
    strategy:
      matrix:
        arch: [amd64, arm64]
    name: Test Setup Trivy ${{ matrix.arch }}
    runs-on:
      - ubuntu-latest
      - linux_${{ matrix.arch }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - name: Setup Trivy
        uses: ./setup-trivy
      - name: Run Trivy
        run: trivy --version

  test-setup-db:
    name: Test Setup DB
    runs-on:
      - ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: ./setup-trivy
      - name: Setup DB
        id: setup-db
        uses: ./setup-db
      - name: Run Trivy
        run: trivy fs --skip-db-update --cache-dir ${{ steps.setup-db.outputs.cache-dir }} .

  test-get-images-from-files:
    name: Test Get Images From Files
    runs-on:
      - ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - name: Get Images From Files
        id: giff
        uses: ./get-images-from-files
        with:
          files: |
            - get-images-from-files/test.Dockerfile
            - get-images-from-files/test-deployment.yaml
      - name: Check image formats extracted
        run: |
          images="${{ steps.giff.outputs.images }}"
          echo "Extracted: $images"
          # Registry with tag
          echo "$images" | grep -q 'example.com/library/nginx:latest'
          echo "$images" | grep -q 'example.com/library/redis:7-alpine'
          echo "$images" | grep -q 'example.com/library/app:1.25-alpine'
          # Registry path with tag
          echo "$images" | grep -q 'example.com/distroless/static:nonroot'
          # Registry with digest
          echo "$images" | grep -q 'example.com/distroless/static@sha256:abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcd'
          echo "$images" | grep -q 'example.com/library/alpine@sha256:1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef'
          echo "$images" | grep -q 'example.com/myproject/myimg@sha256:abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcd'