lint.yml

name: Lint & format

on:
  push:
    branches-ignore: [dev, main, renovate/*]
  workflow_dispatch:

jobs:
  lintformat:
    env:
      TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
      TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
      FORCE_COLOR: true
      HUSKY: 0
      # GITHUB_TOKEN: ${{ secrets.GH_ACT_PAT }}
    name: 'Lint & format'
    runs-on: ubuntu-latest
    steps:
      # Setup steps
      - name: Checkout
        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
        with:
          ref: ${{ github.head_ref }}

      - name: Import GPG key
        id: import_gpg
        uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # v6
        with:
          gpg_private_key: ${{ secrets.BOT_GPG_KEY }}
          git_user_signingkey: true
          git_config_global: true
          git_commit_gpgsign: true

      - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
        name: Install pnpm
        id: pnpm-install
        with:
          run_install: false
          # standalone: true

      - name: Install Node.js
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
        with:
          node-version-file: .nvmrc
          cache: pnpm
          cache-dependency-path: pnpm-lock.yaml

      - name: Install dependencies
        run: pnpm install

      # Linting & Formatting
      - name: Lint workspace
        run: pnpm lint:pkg
        if: always()
        id: workspace-lint

      - name: Lint projects
        run: pnpm lint:fix -- --format github
        if: always()
        id: lint
        env:
          ESLINT_APP_ID: ${{ secrets.BOT_APP_ID }}
          ESLINT_PRIVATE_KEY_BASE64: ${{ secrets.BOT_SECRET_KEY_B64 }}

      - name: Format projects
        run: pnpm format --force
        if: always()
        id: format

      # - name: Check Types
      #   run: pnpm types:check
      #   if: always()
      #   id: typecheck

      # Commit changes
      - name: Commit changed files
        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9
        if: always()
        with:
          message: 'chore: lint & format'
          commit: --signoff --no-verify
          committer_name: InReach [bot]
          committer_email: 108850934+InReach-svc@users.noreply.github.com
          author_name: InReach [bot]
          author_email: 108850934+InReach-svc@users.noreply.github.com
          pull: '--rebase --autostash'