ci: re-apply ops overlay after hard-reset to upstream/main #761

	name: CI

	on:
	push:
	branches: ["**"]
	pull_request:

	jobs:
	backend:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version: "1.24.x"
	cache-dependency-path: backend/go.sum

	- name: Backend tests
	working-directory: backend
	run: go test ./...

	- name: Backend build
	working-directory: backend
	run: go build ./...

	- name: Contract checks
	run: ./scripts/verify-contract.sh

	frontend:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Node
	uses: actions/setup-node@v4
	with:
	node-version: "22"
	cache: npm
	cache-dependency-path: frontend/package-lock.json

	- name: Install frontend dependencies
	working-directory: frontend
	run: npm ci

	- name: Frontend tests
	working-directory: frontend
	run: npm run test

	- name: Frontend build
	working-directory: frontend
	run: npm run build

	- name: Frontend audit
	working-directory: frontend
	run: npm audit --audit-level=moderate

	security:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Install ripgrep
	run: sudo apt-get update && sudo apt-get install -y ripgrep

	- name: Security gate
	run: ./scripts/security-gate.sh

	architecture:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Install ripgrep
	run: sudo apt-get update && sudo apt-get install -y ripgrep

	- name: Architecture guard
	run: ./scripts/architecture-guard.sh

	- name: Go formatting guard
	run: \|
	unformatted="$(gofmt -l backend/cmd/server/*.go)"
	if [ -n "$unformatted" ]; then
	echo "$unformatted"
	exit 1
	fi

Navigation Menu