# .github/workflows/main.yml
name: CI/CD Pipeline
 
on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main]
 
jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'  # Cache node_modules
      
      - run: npm ci
      - run: npm run lint
      - run: npm run type-check
      - run: npm test -- --coverage
      
      - name: Upload coverage
        uses: codecov/codecov-action@v4
 
  deploy-staging:
    needs: test
    if: github.ref == 'refs/heads/develop'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: npm ci && npm run build
      - name: Deploy to staging
        run: # Your deployment script
        env:
          DEPLOY_KEY: ${{ secrets.STAGING_DEPLOY_KEY }}
 
  deploy-production:
    needs: test
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    environment: production  # Requires manual approval
    steps:
      - uses: actions/checkout@v4
      - run: npm ci && npm run build
      - name: Deploy to production
        run: # Your production deployment
        env:
          DEPLOY_KEY: ${{ secrets.PROD_DEPLOY_KEY }}

- name: Build and push Docker image
  uses: docker/build-push-action@v5
  with:
    context: .
    push: true
    tags: |
      myrepo/myapp:latest
      myrepo/myapp:${{ github.sha }}
    cache-from: type=gha     # Use GitHub's cache
    cache-to: type=gha,mode=max

// In your app — track deployment success
console.log(`[DEPLOY] App starting. Version: ${process.env.GIT_SHA}`);
 
// Health endpoint CI/CD calls to verify deployment
app.get('/health', (req, res) => {
  res.json({ status: 'ok', version: process.env.GIT_SHA });
});