integ.yml

name: integration

on:
  push:
    branches:
      - develop
      - main
  pull_request:

permissions:
  contents: read

jobs:
  integration:
    name: Integration tests
    runs-on: ubuntu-latest
    environment:
      name: integration
      deployment: true # This is required to ensure a maintainer must approve all runs

    env:
      TEMPORAL_CLOUD_SERVER: ${{ vars.TEMPORAL_CLOUD_SERVER }}
      TEMPORAL_API_KEY: ${{ secrets.TEMPORAL_API_KEY }}

    steps:
      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

      - name: Set up Go
        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
        with:
          go-version-file: "go.mod"
          check-latest: true
          cache: false

      - name: Validate required environment variables and secrets
        shell: bash
        run: |
          set -euo pipefail

          missing=0

          if [[ -z "${TEMPORAL_CLOUD_SERVER:-}" ]]; then
            echo "::error::TEMPORAL_CLOUD_SERVER is not set or is empty"
            missing=1
          fi


          # Secret: check presence ONLY, never print or echo
          if [[ -z "${TEMPORAL_API_KEY:-}" ]]; then
            echo "::error::TEMPORAL_API_KEY is not set or is empty"
            missing=1
          fi

          if [[ "$missing" -ne 0 ]]; then
            exit 1
          fi

      - name: Run integration tests
        run: |
          make test-integration