Merge pull request #38 from Tanzania-AI-Community/development

Improve CI/CD pipeline

Author: tzaidev

.github/workflows/ci-cd.yml

@@ -0,0 +1,44 @@
+name: CI/CD Pipeline
+
+on:
+  push:
+    branches:
+      - development
+      - main
+  pull_request:
+    branches:
+      - development
+      - main
+
+jobs:
+  lint:
+    uses: ./.github/workflows/lint.yml
+
+  gitguardian:
+    uses: ./.github/workflows/gitguardian.yml
+    secrets:
+      GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY}}
+
+  deploy-dev:
+    needs: [lint, gitguardian]
+    if: github.ref == 'refs/heads/development' && github.event_name == 'push'
+    runs-on: ubuntu-latest
+    environment: development
+    steps:
+      - name: Deploy to Render (Development)
+        env:
+          deploy_url: ${{ secrets.RENDER_DEPLOY_HOOK_URL }}
+        run: |
+          curl "$deploy_url"
+
+  deploy-prod:
+    needs: [lint, gitguardian]
+    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+    runs-on: ubuntu-latest
+    environment: production
+    steps:
+      - name: Deploy to Render (Production)
+        env:
+          deploy_url: ${{ secrets.RENDER_DEPLOY_HOOK_URL }}
+        run: |
+          curl "$deploy_url"

.github/workflows/gitguardian.yml

@@ -1,6 +1,10 @@
 name: GitGuardian scan
 
-on: [push, pull_request]
+on:
+  workflow_call:
+    secrets:
+      GITGUARDIAN_API_KEY:
+        required: true
 
 jobs:
   scanning:
@@ -13,7 +17,7 @@ jobs:
         with:
           fetch-depth: 0 # fetch all history so multiple commits can be scanned
       - name: GitGuardian scan
-        uses: GitGuardian/ggshield/actions/secret@v1.30.1
+        uses: GitGuardian/ggshield/actions/secret@v1.32.0
         env:
           GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }}
           GITHUB_PUSH_BASE_SHA: ${{ github.event.base }}

.github/workflows/black.yml renamed to .github/workflows/lint.yml

@@ -1,6 +1,7 @@
 name: Lint
 
-on: [push, pull_request]
+on:
+  workflow_call:
 
 jobs:
   lint: