ci-pr-trigger.yaml

###############################################################################
# GitOps PR Trigger — Demo
#
# Polls GHCR on a schedule for new image tags and creates a PR to update
# docker-compose.yaml when new versions are detected.
###############################################################################

name: "CI: Check for new releases"

on:
  # schedule:
  #   - cron: "*/5 * * * *" # Uncomment to enable polling
  workflow_dispatch: # Manual trigger only (safe for demo)

concurrency:
  group: ci-pr-trigger
  cancel-in-progress: true

jobs:
  get-versions:
    runs-on: ubuntu-latest
    outputs:
      backend_tag: ${{ steps.backend.outputs.tag }}
      frontend_tag: ${{ steps.frontend.outputs.tag }}
    steps:
      - uses: actions/checkout@v4

      - name: Get latest backend tag
        id: backend
        uses: ./.github/actions/ghcr-latest-tag
        with:
          image: "aquasecurity/trivy"
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Get latest frontend tag
        id: frontend
        uses: ./.github/actions/ghcr-latest-tag
        with:
          image: "aquasecurity/trivy"
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Log discovered versions
        run: |
          echo "Backend: ${{ steps.backend.outputs.tag }}"
          echo "Frontend: ${{ steps.frontend.outputs.tag }}"

  gitops_pr:
    needs: get-versions
    if: needs.get-versions.outputs.backend_tag != '' || needs.get-versions.outputs.frontend_tag != ''
    uses: ./.github/workflows/ci-create-release-pr.yaml
    with:
      baseBranch: "main"
      backendTag: ${{ needs.get-versions.outputs.backend_tag }}
      frontendTag: ${{ needs.get-versions.outputs.frontend_tag }}
      envPath: "projects/demo-app/.env"
    secrets: inherit

  cleanup:
    runs-on: ubuntu-latest
    if: github.event_name == 'schedule'
    steps:
      - name: Delete old successful scheduled runs
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          REPO="${{ github.repository }}"
          WORKFLOW_ID="${{ github.workflow }}"

          # Get completed successful runs (skip the current one)
          gh api "repos/${REPO}/actions/workflows/${WORKFLOW_ID}/runs?status=completed&conclusion=success&per_page=100" \
            --jq ".workflow_runs[] | select(.id != ${{ github.run_id }}) | .id" | while read -r id; do
            echo "Deleting run ${id}"
            gh api -X DELETE "repos/${REPO}/actions/runs/${id}" || true
          done