Comprehensive comparison for DevOps technology in Software Development applications

version: 2.1

# Orbs are reusable packages of CircleCI configuration
orbs:
  node: circleci/node@5.1.0
  aws-cli: circleci/aws-cli@3.1.0
  slack: circleci/slack@4.12.0

# Define reusable executors
executors:
  node-executor:
    docker:
      - image: cimg/node:18.16.0
    resource_class: medium
    working_directory: ~/project

# Define reusable commands
commands:
  restore-dependencies:
    description: "Restore cached dependencies"
    steps:
      - restore_cache:
          keys:
            - v1-dependencies-{{ checksum "package-lock.json" }}
            - v1-dependencies-

  save-dependencies:
    description: "Save dependencies to cache"
    steps:
      - save_cache:
          key: v1-dependencies-{{ checksum "package-lock.json" }}
          paths:
            - node_modules

jobs:
  # Job 1: Install dependencies and run linting
  build-and-lint:
    executor: node-executor
    steps:
      - checkout
      - restore-dependencies
      - run:
          name: Install dependencies
          command: npm ci
      - save-dependencies
      - run:
          name: Run ESLint
          command: npm run lint
      - run:
          name: Check code formatting
          command: npm run format:check

  # Job 2: Run unit and integration tests
  test:
    executor: node-executor
    parallelism: 4
    steps:
      - checkout
      - restore-dependencies
      - run:
          name: Run tests with coverage
          command: |
            TESTFILES=$(circleci tests glob "src/**/*.test.js" | circleci tests split --split-by=timings)
            npm test -- $TESTFILES --coverage --maxWorkers=2
      - run:
          name: Upload coverage to Codecov
          command: bash <(curl -s https://codecov.io/bash)
          when: always
      - store_test_results:
          path: test-results
      - store_artifacts:
          path: coverage

  # Job 3: Security scanning
  security-scan:
    executor: node-executor
    steps:
      - checkout
      - restore-dependencies
      - run:
          name: Run npm audit
          command: npm audit --audit-level=moderate
      - run:
          name: Check for vulnerable dependencies
          command: npx snyk test --severity-threshold=high
          when: always

  # Job 4: Build Docker image and push to registry
  build-docker:
    machine:
      image: ubuntu-2204:2023.04.2
    steps:
      - checkout
      - run:
          name: Build Docker image
          command: |
            docker build -t myapp:${CIRCLE_SHA1} .
            docker tag myapp:${CIRCLE_SHA1} myapp:latest
      - run:
          name: Push to Docker Hub
          command: |
            echo $DOCKER_PASSWORD | docker login -u $DOCKER_USERNAME --password-stdin
            docker push myapp:${CIRCLE_SHA1}
            docker push myapp:latest

  # Job 5: Deploy to staging environment
  deploy-staging:
    executor: node-executor
    steps:
      - checkout
      - aws-cli/setup:
          aws-access-key-id: AWS_ACCESS_KEY_ID
          aws-secret-access-key: AWS_SECRET_ACCESS_KEY
          aws-region: AWS_DEFAULT_REGION
      - run:
          name: Deploy to ECS Staging
          command: |
            aws ecs update-service \
              --cluster staging-cluster \
              --service myapp-service \
              --force-new-deployment
      - run:
          name: Wait for deployment
          command: |
            aws ecs wait services-stable \
              --cluster staging-cluster \
              --services myapp-service
      - slack/notify:
          event: pass
          template: success_tagged_deploy_1

  # Job 6: Run smoke tests against staging
  smoke-tests:
    executor: node-executor
    steps:
      - checkout
      - restore-dependencies
      - run:
          name: Run smoke tests
          command: npm run test:smoke -- --env=staging
      - slack/notify:
          event: fail
          template: basic_fail_1

# Define the workflow
workflows:
  version: 2
  build-test-deploy:
    jobs:
      - build-and-lint:
          context: global-context
      - test:
          context: global-context
          requires:
            - build-and-lint
      - security-scan:
          context: global-context
          requires:
            - build-and-lint
      - build-docker:
          context: docker-context
          requires:
            - test
            - security-scan
          filters:
            branches:
              only:
                - main
                - develop
      - deploy-staging:
          context: aws-staging-context
          requires:
            - build-docker
          filters:
            branches:
              only: develop
      - smoke-tests:
          requires:
            - deploy-staging
      - hold-production:
          type: approval
          requires:
            - smoke-tests
          filters:
            branches:
              only: main
      - deploy-production:
          context: aws-production-context
          requires:
            - hold-production
          filters:
            branches:
              only: main