Software Testing and Quality Assurance

name: Automated Quality Gate
on: [push, pull_request]

jobs:
  test-and-verify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with: { python-version: '3.11' }

      - name: Install Dependencies
        run: pip install -r requirements.txt pytest pytest-cov

      - name: Run Test Suite with Coverage
        run: pytest -q --junitxml=reports/junit.xml --cov=src --cov-report=xml:coverage.xml

      - name: Enforce 80% Coverage Line Gate
        run: |
          python - <<'PY'
          import xml.etree.ElementTree as ET
          root = ET.parse('coverage.xml').getroot()
          cov = float(root.get('line-rate', 0.0)) * 100
          print(f"Current Line Coverage: {cov:.1f}%")
          if cov < 80.0:
              print("ERROR: Code coverage fell below 80% threshold!")
              exit(1)
          PY

### Bug Summary
HTTP 500 Internal Server Error when submitting orders with empty discount codes.

### Steps to Reproduce
1. Add Item SKU-102 to shopping cart.
2. Proceed to checkout and submit an empty string in the promo field.
3. Click "Complete Purchase".

### Expected vs Actual
- Expected: System validates input, ignores empty code, and processes checkout.
- Actual: NullPointerExceptions raised in OrderService.java:142; page displays 500 error.

### Environment & Commit
Version: v2.4.1 | Commit: a1f89c2 | Browser: Chrome 122 / macOS 14.3

### Severity
High (Blocks purchase completion for users clicking field).

# Python Dependency Vulnerability Audit
pip install pip-audit && pip-audit --fail-on vuln

# OWASP ZAP Baseline Security Scan via Docker
docker run --rm -t owasp/zap2docker-stable zap-baseline.py -t https://test.example.com -m 1 -r zap.html

# Automated Accessibility Testing via Axe CLI
npx @axe-core/cli https://test.example.com --exit 1 --save axe-report.json