All pull requests targeting main must pass automated CI checks before merging.
-
Backend CI (
.github/workflows/backend-ci.yml):- Provisions
postgres:16andredis:7service containers. - Executes
npm run lint,npm run test:cov, andnpm run build. - Validates that code coverage meets specified thresholds.
- Provisions
-
Frontend CI (
.github/workflows/frontend-ci.yml):- Executes
npm run lint,npm run type-check, andnpm run build.
- Executes
To enforce CI compliance on main:
- Navigate to Repository Settings > Branches.
- Add or edit the protection rule for
main. - Enable Require status checks to pass before merging.
- Search for and select the following status check job names:
Backend Lint, Test & BuildFrontend Lint, Type-Check & Build
- Enable Require branches to be up to date before merging.
No repository secrets are required for basic PR validation as test databases run inside GitHub Actions service containers. Deployment pipeline secrets (e.g., AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) should be added under Settings > Secrets and variables > Actions if extended to continuous deployment.