tests.yml

name: tests

on:
  pull_request:
    branches: [main]
  push:
    branches: [main]

# Add concurrency to prevent parallel runs on same ref
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  cfn-lint-tests:
    strategy:
      fail-fast: false
      max-parallel: 4
      matrix:
        python-version: ['3.9', '3.10', '3.11', '3.12', '3.13']
        os: [ubuntu-latest]
    runs-on: ${{ matrix.os }}
    env:
      FOLDER: cfn-lint-serverless
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
          cache: 'pip'
      - name: Install uv
        uses: astral-sh/setup-uv@v5
      - name: Install ruff
        run: pip install ruff
      - name: Install dependencies
        run: make -C $FOLDER dev
      - name: Formatting and Linting
        run: make -C $FOLDER lint
      - name: Tests
        run: make -C $FOLDER test
      - name: Security baseline
        run: make -C $FOLDER security-baseline
      - name: Complexity baseline
        run: make -C $FOLDER complexity-baseline

  tflint-tests:
    strategy:
      fail-fast: false
      max-parallel: 4
      matrix:
        go-version: ['1.20', '1.21', '1.22', '1.23']
        os: [ubuntu-latest]
    runs-on: ${{ matrix.os }}
    env:
      FOLDER: tflint-ruleset-aws-serverless
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: ${{ matrix.go-version }}
          cache: true
      - name: Install dependencies
        run: make -C $FOLDER dev
      - name: Formatting and Linting
        run: make -C $FOLDER lint
      - name: Tests
        run: make -C $FOLDER test