Full rework

.github/pull_request_template.md

@@ -1,6 +1,5 @@
-Please go the the `Preview` tab and select the appropriate sub-template:
+Please follow [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) for your PR title, e.g.:
 
-- [🐞 Bug Fix](?expand=1&labels=bug&title=🐞+fix%3a&template=empty.md)
-- [🚀 Enhancement](?expand=1&labels=enhancement&title=🚀+enhancement%3a&template=empty.md)
-- [✨ Feature](?expand=1&labels=feature&title=✨+feature%3a&template=empty.md)
-- [📚 Documentation](?expand=1&labels=documentation&title=📚+documentation%3a&template=empty.md)
+- `feat: add new authentication method`
+- `fix: correct typo in documentation`
+- `chore: update dependencies`

.github/workflows/build_image.yml

@@ -1,25 +1,34 @@
 name: Build and publish container images
 
 on:
-  release:
-    types: [published]
   push:
     branches:
-      - main
+      - 'main'
+    tags:
+      - '*'
+  pull_request:
+    branches:
+      - 'main'
 
 jobs:
   build:
     name: Build and publish container images
     runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        runtime: [node, bun]
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install --frozen-lockfile
+      - name: Run Trivy scanner on fs
+        uses: aquasecurity/trivy-action@0.32.0
+        with:
+          scan-type: 'fs'
+          scan-ref: '.'
+          exit-code: 1
+          format: 'table'
+          ignore-unfixed: true
+          vuln-type: 'os,library'
+          severity: 'CRITICAL,HIGH'
+          trivyignores: .trivyignore
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -41,32 +50,60 @@ jobs:
         id: meta
         uses: docker/metadata-action@v5
         with:
-          flavor: |
-            latest=false
           images: |
-            deutschemodelunitednations/chase
+            deutschemodelunitednations/munify-chase
             ghcr.io/${{ github.repository_owner }}/${{ github.repository }}
           tags: |
-            type=raw,value=${{ github.sha }},suffix=${{ matrix.runtime != 'bun' && format('-{0}', matrix.runtime) || '' }}
-
-            type=semver,pattern={{version}},value=${{ github.event.release.tag_name }},enable=${{ github.event_name == 'release' }},suffix=${{ matrix.runtime != 'bun' && format('-{0}', matrix.runtime) || '' }}
-
-            type=raw,value=latest,enable=${{ github.event_name == 'release' && !github.event.release.prerelease }}
-            type=semver,pattern={{major}},value=${{ github.event.release.tag_name }},enable=${{ github.event_name == 'release' && !github.event.release.prerelease }},suffix=${{ matrix.runtime != 'bun' && format('-{0}', matrix.runtime) || '' }}
-            type=semver,pattern={{major}}.{{minor}},value=${{ github.event.release.tag_name }},enable=${{ github.event_name == 'release' && !github.event.release.prerelease }},suffix=${{ matrix.runtime != 'bun' && format('-{0}', matrix.runtime) || '' }}
-
-            type=raw,value=prerelease,enable=${{ github.event_name == 'release' && github.event.release.prerelease }},suffix=${{ matrix.runtime != 'bun' && format('-{0}', matrix.runtime) || '' }}
-            type=raw,value=nightly,enable=${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }},suffix=${{ matrix.runtime != 'bun' && format('-{0}', matrix.runtime) || '' }}
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
 
-      - name: Build and push Docker image
+      - name: Build Docker image
         uses: docker/build-push-action@v5
+        id: build
         with:
-          context: .
-          push: true
-          # platforms: linux/amd64,linux/arm64
+          load: true
+          push: false
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-          file: ./Dockerfile.${{ matrix.runtime }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
           build-args: |
-            VERSION=${{ github.event.release.tag_name }}
+            TAG=${{ steps.split-tags.outputs.fragment }}
             SHA=${{ github.sha }}
+
+      - name: Get first built image ref
+        id: split-tags
+        run: echo "fragment=$(echo "${DOCKER_METADATA_OUTPUT_TAGS}" | head -n 1)" >> $GITHUB_OUTPUT
+
+      - name: Run Trivy vulnerability scanner on the built image
+        uses: aquasecurity/trivy-action@0.32.0
+        with:
+          image-ref: ${{ steps.split-tags.outputs.fragment }}
+          format: 'table'
+          exit-code: '1'
+          ignore-unfixed: true
+          vuln-type: 'os,library'
+          severity: 'CRITICAL,HIGH'
+          skip-setup-trivy: true
+          trivyignores: .trivyignore
+
+      - name: Push images
+        run: |
+          set -eu
+          echo "Pushing images..."
+          TAGS="${{ steps.meta.outputs.tags }}"
+          echo "Raw tags: $TAGS"
+          echo "$TAGS" | sed 's/,/ /g' | tr ' ' '\n' | sed '/^\s*$/d' | while read -r tag; do
+            echo "Pushing $tag"
+            docker push "$tag"
+          done
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        if: github.ref_type == 'tag'
+        with:
+          generate_release_notes: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -22,5 +22,7 @@ Thumbs.db
 vite.config.js.timestamp-*
 vite.config.ts.timestamp-*
 
+# Paraglide
+src/lib/paraglide
 
-.houdini
+src/lib/api/rumbleClient

.prettierignore

@@ -2,4 +2,8 @@
 package-lock.json
 pnpm-lock.yaml
 yarn.lock
-schema.graphql
+bun.lock
+bun.lockb
+
+# Miscellaneous
+/static/

.prettierrc

@@ -1,15 +1,16 @@
 {
-	"useTabs": true,
-	"singleQuote": true,
-	"trailingComma": "none",
-	"printWidth": 100,
-	"plugins": ["prettier-plugin-svelte", "prettier-plugin-tailwindcss"],
-	"overrides": [
-		{
-			"files": "*.svelte",
-			"options": {
-				"parser": "svelte"
-			}
-		}
-	]
+  "useTabs": false,
+  "singleQuote": true,
+  "trailingComma": "none",
+  "printWidth": 100,
+  "plugins": ["prettier-plugin-svelte", "prettier-plugin-tailwindcss"],
+  "tailwindStylesheet": "./src/routes/layout.css",
+  "overrides": [
+    {
+      "files": "*.svelte",
+      "options": {
+        "parser": "svelte"
+      }
+    }
+  ]
 }