Implement changes for SDLC - CI pipeline and PR template

[timler]

Description

Test a Github Actions CI workflow to build the code and run the automated tests and checks (from Code Climate and SYNK).

Add the PR template to enforce the structure of PR messages.

Type of change

• New Feature
• Bug Fix
• Refactor
• Documentation Update
• Style
• Performance Improvements
• Test Update
• Build/CI Update

Testing

• Unit Tests Added/Updated
• Integration Tests Added/Updated
• Manual Testing Completed

Test Cases

1. Run mvn clean install and view jacoco test coverage
2. Test CI pipeline with this PR

Deployment Instructions (optional)

These instructions explain how to set up the integrations for Code Climate and Synk. They only need to be done once per repo.

The Code Climate dashboard can be viewed without an account, but to get access to the Synk dashboard you will need to be added as a member of the organisation.

All integrations require approval by a Github organisation admin - so a higher authority than repo admin.

For Code Climate:

1. Go to https://codeclimate.com/login/github/join and login with your Github account
2. Choose the "Open Source" option and add the repo(s)
3. Install the CodeClimate Github App
4. In the Code Climate dashboard for the project, go to "Repository Settings" then "GitHub settings"
5. Enable the Summary Comments feature
6. Enable the Inline Issue Comments feature
7. Scroll down to "Webhook on GitHub" and click Install.
8. Open the "Test Coverage" settings page and copy the "Test reporter ID"
9. Add the ID as a secret in the GitHub repository with the key CC_TEST_REPORTER_ID

For Snyk:

1. Go to https://app.snyk.io/login
2. Create a new organisation and link the repo(s)
3. Add members
4. Go to your personal Github settings and generate a Personal Access Token.
5. Go to Synk Integrations and add Github
6. Go to Settings, and find Github under Integrations (or click here)
7. Add your Personal Access Token under the "Pull Requests" section
8. Change settings to disable Synk auto fix PRs and enable PR comments
9. Go to your Account Settings, generate an Auth Token and copy the value
10. Add the auth token as a secret in the Github repository with the key SNYK_TOKEN

QA Instructions (optional)

See the Code Climate dashboards:

• fasp-api
• fasp-core-ui

To access the Synk dashboards, you will need to be added as a member of the organisation

Breaking Changes

• This PR introduces breaking changes

Dependencies

• Code Climate - https://codeclimate.com/
• SYNK - https://snyk.io/
• Jacoco - https://www.jacoco.org/jacoco/

Related Tickets & Documents

Part of deliverable 1.4.1

Screenshots/Recordings

TODO

Checklist

• Code follows style guidelines
• Self-review completed
• Tests pass locally
• Documentation updated
• No new warnings generated

Additional Notes

[timler]

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)