AC - brought over the current modules from bs-select

.github/actions/enforce-pr-title-format/action.yml

@@ -0,0 +1,114 @@
+name: Enforce PR title format
+description: Check PR title matches required format and post guidance when invalid
+inputs:
+  github-token:
+    description: GitHub token used to call the REST API
+    required: true
+  title-pattern:
+    description: Regex pattern the PR title must match
+    required: false
+    default: "^(SCM|BSS|BSS2)-[0-9]+ .{5,}"
+  title-pattern-description:
+    description: Human-readable description of the expected format
+    required: false
+    default: "PR title must start with SCM, BSS, or BSS2 ticket number followed by a space and description (minimum 5 characters, e.g., SCM-1234 description or BSS-5678 description or BSS2-9012 description)"
+
+runs:
+  using: composite
+  steps:
+    - name: Check PR title format and comment on invalid format
+      uses: actions/github-script@v6
+      env:
+        TITLE_PATTERN: ${{ inputs.title-pattern }}
+        TITLE_PATTERN_DESCRIPTION: ${{ inputs.title-pattern-description }}
+      with:
+        github-token: ${{ inputs.github-token }}
+        script: |
+          const pr = context.payload.pull_request;
+          if (!pr) throw new Error('This action must be run in the context of a pull_request event.');
+
+          // Fetch current PR state to get up-to-date title (important for workflow reruns)
+          const { data: currentPr } = await github.rest.pulls.get({
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            pull_number: pr.number,
+          });
+
+          const title = currentPr.title || '';
+          const pattern = process.env.TITLE_PATTERN || '^(SCM|BSS)-[0-9]+ .{5,}';
+          const patternDescription = process.env.TITLE_PATTERN_DESCRIPTION || 'PR title must start with SCM or BSS ticket number followed by a space and description (minimum 5 characters, e.g., SCM-1234 description or BSS-5678 description)';
+          const regex = new RegExp(pattern);
+
+          core.info(`PR title: "${title}"`);
+          core.info(`Expected pattern: ${pattern}`);
+          core.info(`Pattern description: ${patternDescription}`);
+
+          if (!regex.test(title)) {
+            const body = [
+              '❌ **Automated check: PR title format validation failed**',
+              '',
+              `**Current title:** \`${title}\``,
+              '',
+              `**Required format:** ${patternDescription}`,
+              '',
+              '**Examples of valid titles:**',
+              '- `SCM-1234 Add new user authentication feature`',
+              '- `BSS-5678 Fix API timeout issue`',
+              '- `SCM-9012 Update README with setup instructions`',
+              '- `BSS-3456 Optimize database query performance`',
+              '',
+              'Please update your PR title to match the required format before merging.',
+            ].join('\n');
+
+            const { data: comments } = await github.rest.issues.listComments({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: pr.number,
+              per_page: 100,
+            });
+
+            const marker = 'Automated check: PR title format validation failed';
+            const existing = (comments || []).find(c => c.user && c.user.type === 'Bot' && c.body && c.body.includes(marker));
+
+            if (existing) {
+              // Update existing comment
+              await github.rest.issues.updateComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                comment_id: existing.id,
+                body,
+              });
+            } else {
+              // Create new comment
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: pr.number,
+                body,
+              });
+            }
+
+            throw new Error(`PR title does not match required format: ${patternDescription}`);
+          } else {
+            core.info('✅ PR title matches required format — check passed.');
+
+            // Optionally clean up old warning comments if title is now valid
+            const { data: comments } = await github.rest.issues.listComments({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: pr.number,
+              per_page: 100,
+            });
+
+            const marker = 'Automated check: PR title format validation failed';
+            const existing = (comments || []).find(c => c.user && c.user.type === 'Bot' && c.body && c.body.includes(marker));
+
+            if (existing) {
+              core.info('Deleting old validation failure comment since title is now valid.');
+              await github.rest.issues.deleteComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                comment_id: existing.id,
+              });
+            }
+          }

.github/actions/extract-branch-name/action.yaml

@@ -0,0 +1,51 @@
+name: "Extract Branch Name"
+description: "Extracts the branch name (strips feature/ prefix) and exposes it as an output"
+
+inputs:
+  branch:
+    description: "Branch name to extract (default: PR head or GITHUB_REF)"
+    required: false
+    default: ${{ github.head_ref || github.ref_name }}
+  short_code:
+    description: appended to tags when used instead of branches
+    required: false
+    default: ""
+
+outputs:
+  branch_name:
+    description: "Branch name without feature/ prefix"
+    value: ${{ steps.extract.outputs.branch_name }}
+
+runs:
+  using: "composite"
+  steps:
+    - name: Extract branch name
+      id: extract
+      shell: bash
+      env:
+        SHORT_CODE: ${{ inputs.short_code }}
+        BRANCH: ${{ inputs.branch }}
+      run: |
+        SHORT_CODE="${SHORT_CODE}"
+        BRANCH="${BRANCH}"
+        BRANCH_NAME="${BRANCH##*/}"
+
+        # Check if this is a version tag
+        if [[ "$BRANCH_NAME" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+          # If short_code is provided, prefix the tag
+          if [[ -n "$SHORT_CODE" ]]; then
+            BRANCH_NAME="${SHORT_CODE}-${BRANCH_NAME}"
+          fi
+        else
+          BRANCH_NAME=$(echo "$BRANCH_NAME" | tr -cd '[:alnum:]-' | cut -c 1-30)
+        fi
+
+        # removing any trailing dash
+        BRANCH_NAME="${BRANCH_NAME%-}"
+
+        echo "branch_name=$BRANCH_NAME" >> "$GITHUB_OUTPUT"
+
+    - name: Echo branch name
+      shell: bash
+      run: |
+        echo "branch_name = '${{ steps.extract.outputs.branch_name }}'"

.github/actions/set-metadata/action.yaml

@@ -0,0 +1,194 @@
+name: "Set CI/CD metadata"
+
+description: "Sets metadata for CI/CD workflows"
+
+inputs:
+  calling_workflow:
+    description: "The workflow that is calling this action"
+    required: true
+  tag:
+    description: "The tag that is going to be used when CICD deploy calls this action"
+    required: false
+  action:
+    description: "Action to be performed (e.g., apply, destroy)"
+    required: false
+  environment:
+    description: "Environment for the action (e.g., cicd)"
+    required: false
+  image_tag:
+    description: "Docker image tag"
+    required: false
+  nation:
+    description: "Nation tag for the image"
+    required: false
+  sql_file:
+    description: "SQL file to run against the database (optional)"
+    required: false
+    default: "coreData.sql"
+  environment_name:
+    description: "Suffix to append to the job name for uniqueness"
+    required: false
+  triggered_by_lambda:
+    description: "This workflow is being called from lambda"
+    required: false
+  short_code:
+    description: "Short code to identify the user"
+    required: false
+    default: ""
+  build_type:
+    description: "Clean or Patch build"
+  db_snapshot_identifier:
+    description: "RDS snapshot identifier to use for the database"
+    required: false
+  release_tag:
+    description: "Release tag"
+    required: false
+  ttl_days:
+    description: "Number of days to keep the ephemeral environment"
+    required: false
+
+outputs:
+  # Default Variables
+  build_datetime:
+    description: "Build date and time"
+    value: ${{ steps.default_variables.outputs.build_datetime }}
+  build_timestamp:
+    description: "Build timestamp"
+    value: ${{ steps.default_variables.outputs.build_timestamp }}
+  build_epoch:
+    description: "Build epoch"
+    value: ${{ steps.default_variables.outputs.build_epoch }}
+  nodejs_version:
+    description: "Node.js version"
+    value: ${{ steps.default_variables.outputs.nodejs_version }}
+  python_version:
+    description: "Python version"
+    value: ${{ steps.default_variables.outputs.python_version }}
+  terraform_version:
+    description: "Terraform version"
+    value: ${{ steps.default_variables.outputs.terraform_version }}
+  version:
+    description: "Version"
+    value: ${{ steps.default_variables.outputs.version }}
+  # Tag
+  tag:
+    description: "Tag"
+    value: ${{ steps.tag.outputs.tag }}
+  # Workflow Variables
+  branch_name:
+    description: "Branch name"
+    value: ${{ steps.workflow_variables.outputs.branch_name }}
+  action:
+    description: "Action to be performed (e.g., apply, destroy)"
+    value: ${{ steps.workflow_variables.outputs.action }}
+  environment:
+    description: "Environment for the action (e.g., cicd)"
+    value: ${{ steps.workflow_variables.outputs.environment }}
+  image_tag:
+    description: "Docker image tag"
+    value: ${{ steps.set_image_tag.outputs.image_tag }}
+  nation:
+    description: "Nation tag for the image"
+    value: ${{ steps.workflow_variables.outputs.nation }}
+  environment_name:
+    description: "Suffix to append to the job name for uniqueness"
+    value: ${{ steps.workflow_variables.outputs.environment_name }}
+  triggered_by_lambda:
+    description: "This workflow is being called from lambda"
+    value: ${{ steps.workflow_variables.outputs.triggered_by_lambda }}
+  short_code:
+    description: "Short code to identify the user"
+    value: ${{ steps.workflow_variables.outputs.short_code }}
+  build_type:
+    description: "Clean or Patch build"
+    value: ${{ steps.workflow_variables.outputs.build_type }}
+  sql_file:
+    description: "SQL file to run against the database (optional)"
+    value: ${{ steps.workflow_variables.outputs.sql_file }}
+  db_snapshot_identifier:
+    description: "RDS snapshot identifier to use for the database"
+    value: ${{ steps.workflow_variables.outputs.db_snapshot_identifier }}
+  release_tag:
+    description: "Release tag"
+    value: ${{ steps.workflow_variables.outputs.release_tag }}
+  ttl_days:
+    description: "Number of days to keep the ephemeral environment"
+    value: ${{ steps.workflow_variables.outputs.ttl_days }}
+
+runs:
+  using: "composite"
+  steps:
+    - name: "Checkout code"
+      uses: actions/checkout@v6
+
+    - name: "Set default variables"
+      shell: bash
+      id: default_variables
+      run: |
+        datetime=$(date -u +'%Y-%m-%dT%H:%M:%S%z')
+        echo "build_datetime=$datetime" >> $GITHUB_OUTPUT
+        echo "build_timestamp=$(date --date=$datetime -u +'%Y%m%d%H%M%S')" >> $GITHUB_OUTPUT
+        echo "build_epoch=$(date --date=$datetime -u +'%s')" >> $GITHUB_OUTPUT
+        echo "nodejs_version=$(yq '.infrastructure.nodejs // "unknown"' .tool-versions.yml)" >> $GITHUB_OUTPUT
+        echo "python_version=$(yq '.infrastructure.python // "unknown"' .tool-versions.yml)" >> $GITHUB_OUTPUT
+        echo "terraform_version=$(yq '.infrastructure.terraform // "unknown"' .tool-versions.yml)" >> $GITHUB_OUTPUT
+        echo "version=$(head -n 1 .version 2> /dev/null || echo unknown)" >> $GITHUB_OUTPUT
+
+    - name: "Set Deploy Variables"
+      shell: bash
+      if: ${{ inputs.calling_workflow == 'CI/CD deploy' }}
+      id: tag
+      env:
+        INPUT_TAG: ${{ inputs.tag }}
+      run: |
+        echo "tag=$INPUT_TAG" >> $GITHUB_OUTPUT
+
+    - name: Extract Branch Name
+      id: extract_branch
+      uses: ./.github/actions/extract-branch-name
+      with:
+        short_code: ${{ inputs.short_code }}
+
+    - name: Set image name
+      shell: bash
+      id: set_image_tag
+      run: |
+        RAW_REF="${{ steps.extract_branch.outputs.branch_name }}"
+        # Look for a semantic version like v1.0.1 anywhere in the string
+        if [[ "$RAW_REF" =~ (v[0-9]+\.[0-9]+\.[0-9]+) ]]; then
+          IMAGE_TAG="${BASH_REMATCH[1]}"   # Extract just the semver
+        else
+          IMAGE_TAG="${RAW_REF}-latest"    # Fallback
+        fi
+        echo "image_tag=$IMAGE_TAG" >> "$GITHUB_OUTPUT"
+
+    - name: "Set ${{ inputs.calling_workflow }} Variables"
+      shell: bash
+      id: workflow_variables
+      env:
+        INPUT_CALLING_WORKFLOW: ${{ inputs.calling_workflow }}
+        INPUT_ACTION: ${{ inputs.action }}
+        INPUT_BUILD_TYPE: ${{ inputs.build_type }}
+        INPUT_DB_SNAPSHOT_IDENTIFIER: ${{ inputs.db_snapshot_identifier }}
+        INPUT_ENVIRONMENT: ${{ inputs.environment }}
+        INPUT_ENVIRONMENT_NAME: ${{ inputs.environment_name }}
+        INPUT_NATION: ${{ inputs.nation }}
+        INPUT_RELEASE_TAG: ${{ inputs.release_tag }}
+        INPUT_SHORT_CODE: ${{ inputs.short_code }}
+        INPUT_SQL_FILE: ${{ inputs.sql_file }}
+        INPUT_TTL_DAYS: ${{ inputs.ttl_days }}
+        INPUT_TRIGGERED_BY_LAMBDA: ${{ inputs.triggered_by_lambda }}
+      run: |
+        echo "calling_workflow=${INPUT_CALLING_WORKFLOW}" >> $GITHUB_OUTPUT
+        echo "branch_name=${{ steps.extract_branch.outputs.branch_name }}" >> $GITHUB_OUTPUT
+        echo "action=${INPUT_ACTION}" >> $GITHUB_OUTPUT
+        echo "environment=${INPUT_ENVIRONMENT}" >> $GITHUB_OUTPUT
+        echo "nation=${INPUT_NATION}" >> $GITHUB_OUTPUT
+        echo "sql_file=${INPUT_SQL_FILE}" >> $GITHUB_OUTPUT
+        echo "environment_name=${INPUT_ENVIRONMENT_NAME}" >> $GITHUB_OUTPUT
+        echo "triggered_by_lambda=${INPUT_TRIGGERED_BY_LAMBDA}" >> $GITHUB_OUTPUT
+        echo "short_code=${INPUT_SHORT_CODE}" >> $GITHUB_OUTPUT
+        echo "build_type=${INPUT_BUILD_TYPE}" >> $GITHUB_OUTPUT
+        echo "db_snapshot_identifier=${INPUT_DB_SNAPSHOT_IDENTIFIER}" >> $GITHUB_OUTPUT
+        echo "release_tag=${INPUT_RELEASE_TAG}" >> $GITHUB_OUTPUT
+        echo "ttl_days=${INPUT_TTL_DAYS}" >> $GITHUB_OUTPUT