code-quality.yml

name: Code Quality Checks

on:
  workflow_run:
    workflows: ['CI Pipeline']
    types: [completed]
    branches: [main, develop]

jobs:
  code-quality:
    name: Code Quality Analysis
    runs-on: ubuntu-latest
    if: ${{ github.event.workflow_run.conclusion == 'success' }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Run comprehensive linting
        run: |
          npm run lint
          npm run format:check

      - name: TypeScript strict check
        run: npx tsc --noEmit --strict

      - name: Build verification
        run: npm run build

      - name: Security audit
        run: npm run security:audit

      - name: Dependency analysis
        run: |
          npm run deps:check
          npm run deps:outdated

      - name: Check for console.log statements
        run: |
          if grep -r "console\.log" src/ --include="*.ts" --include="*.tsx"; then
            echo "Warning: console.log statements found in source code"
            echo "Consider removing them before production deployment"
          else
            echo "No console.log statements found"
          fi

      - name: Check for TODO/FIXME comments
        run: |
          echo "Checking for TODO/FIXME comments..."
          if grep -r "TODO\|FIXME" src/ --include="*.ts" --include="*.tsx"; then
            echo "Found TODO/FIXME comments in source code"
            echo "Consider addressing these before merging"
          else
            echo "No TODO/FIXME comments found"
          fi