code-quality.yml

name: Code Quality

on:
  workflow_dispatch:
  schedule:
    # Run weekly on Sundays at 2 AM UTC
    - cron: '0 2 * * 0'

jobs:
  security-audit:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        workspace: [frontend, backend]

    defaults:
      run:
        working-directory: ./${{ matrix.workspace }}

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'
          cache-dependency-path: ${{ matrix.workspace }}/package-lock.json

      - name: Install dependencies
        run: npm ci

      - name: Run security audit
        run: npm audit --audit-level=moderate

      - name: Check for outdated packages
        run: npm outdated || true

  code-quality:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'

      - name: Install frontend dependencies
        run: cd frontend && npm ci

      - name: Install backend dependencies
        run: cd backend && npm ci

      - name: Run frontend quality checks
        run: |
          cd frontend
          npm run ci

      - name: Run backend quality checks
        run: |
          cd backend
          npm run ci

      - name: Create quality report
        run: |
          echo "## Code Quality Report" >> quality-report.md
          echo "- ✅ All linting checks passed" >> quality-report.md
          echo "- ✅ All formatting checks passed" >> quality-report.md
          echo "- ✅ All type checks passed" >> quality-report.md