Workflow: Setup & Configuration (20)

graph TB
    subgraph Configure [⚙️ Phase 1: Configure]
        direction TB
        A[Need CI/CD] --> B[setup-ci-cd]
        B --> C{GitHub or GitLab?}
        C --> D[Configure workflow]
    end

    subgraph Build [🔨 Phase 2: Build]
        direction TB
        D --> E[Parallel tests]
        E --> F[Security scanning]
        F --> G[Deploy strategy]
    end

    subgraph Verify [✅ Phase 3: Verify]
        direction TB
        G --> H{Working?}
        H -- No --> D
    end

    H -- Yes --> I((Start Development))

    %% Styling
    style Configure fill:#f5f5f5,stroke:#333,stroke-dasharray: 5 5
    style Build fill:#e1f5fe,stroke:#01579b
    style Verify fill:#fff3e0,stroke:#e65100
    style C fill:#ffd54f
    style H fill:#ffd54f
    style I fill:#e8f5e9,stroke:#1b5e20,stroke-width:3px

# .github/workflows/ci.yml
name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: ubuntu-latest

    services:
      postgres:
        image: postgres:15
        env:
          POSTGRES_PASSWORD: postgres
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432:5432

    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5

      - name: Setup Ruby
        uses: ruby/setup-ruby@ff740bc00a01b3a50fffc55a1071b1060eeae9dc
        with:
          ruby-version: '3.2'
          bundler-cache: true

      - name: Setup Database
        env:
          RAILS_ENV: test
          DATABASE_URL: postgres://postgres:postgres@localhost:5432/test
        run: |
          bin/rails db:create db:migrate

      - name: Run Tests
        env:
          DATABASE_URL: postgres://postgres:postgres@localhost:5432/test
        run: bundle exec rspec

      - name: Run Linters
        run: |
          bundle exec rubocop
          bundle exec erb-lint app/views

# Security job
security:
  runs-on: ubuntu-latest
  steps:
    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5

    - name: Setup Ruby
      uses: ruby/setup-ruby@ff740bc00a01b3a50fffc55a1071b1060eeae9dc
      with:
        bundler-cache: true

    - name: Brakeman
      run: bundle exec brakeman -q -w2 --no-pager

    - name: Bundle Audit
      run: bundle exec bundle-audit check --update