name: Wazuh Docker pipeline
permissions:
  contents: read
  id-token: write
on: [pull_request]

jobs:

  prepare-variables:
    runs-on: ubuntu-latest
    outputs:
      WAZUH_VERSION: ${{ steps.dotenv.outputs.WAZUH_VERSION }}
      WAZUH_IMAGE_VERSION: ${{ steps.dotenv.outputs.WAZUH_IMAGE_VERSION }}
      WAZUH_TAG_REVISION: ${{ steps.dotenv.outputs.WAZUH_TAG_REVISION }}
      WAZUH_UI_REVISION: ${{ steps.dotenv.outputs.WAZUH_UI_REVISION }}
      WAZUH_REGISTRY: ${{ vars.IMAGE_REGISTRY_DEV }}
      IMAGE_TAG: ${{ steps.dotenv.outputs.IMAGE_TAG }}
      WAZUH_MINOR_VERSION: ${{ steps.dotenv.outputs.WAZUH_MINOR_VERSION }}
    steps:

      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Export .env variables
        id: dotenv
        shell: bash
        run: |
          if [ ! -f .env ]; then echo "::error::.env missing"; exit 1; fi
          grep -v '^#' .env | grep -v '^\s*$' >> "$GITHUB_OUTPUT"
          FULL_VERSION=$(grep "^WAZUH_VERSION=" .env | cut -d'=' -f2)
          MINOR_VERSION=$(echo "$FULL_VERSION" | cut -d'.' -f1,2)
          echo "WAZUH_MINOR_VERSION=$MINOR_VERSION" >> "$GITHUB_OUTPUT"


  build-images:
    runs-on: ubuntu-latest
    needs: prepare-variables
    steps:

      - name: Build step
        run: echo "Build Docker images here"
#    uses: ./.github/workflows/Procedure_push_docker_images.yml
#    secrets: inherit
#    with:
#      image_tag: ${{ needs.prepare-variables.outputs.WAZUH_IMAGE_VERSION }}
#      docker_reference: ${{ github.head_ref }}
#      revision: ${{ needs.prepare-variables.outputs.WAZUH_TAG_REVISION }}
#      reference: "latest"
#      id: ${{ github.run_id }}
#      dev: true

  Execute-Goss-tests:
    needs: [prepare-variables, build-images]
    runs-on: ubuntu-22.04
    env:
      WAZUH_IMAGE_VERSION: ${{ needs.prepare-variables.outputs.WAZUH_IMAGE_VERSION }}
      WAZUH_REGISTRY: ${{ needs.prepare-variables.outputs.WAZUH_REGISTRY }} 
    steps:

    - name: Check out code
      uses: actions/checkout@v4

    - name: Install Goss
      uses: e1himself/goss-installation-action@v1.0.3
      with:
        version: 'v0.4.4'

    - name: Configure aws credentials
      uses: aws-actions/configure-aws-credentials@v4
      with:
        role-to-assume: ${{ secrets.AWS_IAM_DOCKER_ROLE }}
        aws-region: "${{ secrets.AWS_REGION }}"

    - name: Log in to Amazon ECR
      uses: aws-actions/amazon-ecr-login@v2

    - name: Execute Goss tests (wazuh-manager)
      run: dgoss run ${{ env.WAZUH_REGISTRY }}/wazuh/wazuh-manager:${{ env.WAZUH_IMAGE_VERSION }}
      env:
        GOSS_SLEEP: 30
        GOSS_FILE: .github/.goss.yaml

  check-single-node:
    name: Check single node on ${{ matrix.os }}
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-22.04, ubuntu-22.04-arm]
      fail-fast: false
    needs: [prepare-variables, Execute-Goss-tests, build-images]
    env:
      WAZUH_IMAGE_VERSION: ${{ needs.prepare-variables.outputs.WAZUH_IMAGE_VERSION }}
      WAZUH_MINOR_VERSION: ${{ needs.prepare-variables.outputs.WAZUH_MINOR_VERSION }}
      WAZUH_REGISTRY: ${{ needs.prepare-variables.outputs.WAZUH_REGISTRY }} 
      INDEXER_USERNAME: admin
      INDEXER_PASSWORD: admin
      API_USERNAME: wazuh-wui
      API_PASSWORD: MyS3cr37P450r.*-
      MANAGER_NODES: "manager"
    steps:

    - name: Check out code
      uses: actions/checkout@v4

    - name: free disk space
      uses: ./.github/free-disk-space

    - name: Configure aws credentials
      uses: aws-actions/configure-aws-credentials@v4
      with:
        role-to-assume: ${{ secrets.AWS_IAM_DOCKER_ROLE }}
        aws-region: "${{ secrets.AWS_REGION }}"

    - name: Log in to Amazon ECR
      uses: aws-actions/amazon-ecr-login@v2

    - name: Create single node certficates
      run: |
        wazuh_certs_tool_url=$(aws s3 presign s3://${{ vars.AWS_S3_BUCKET_DEV }}/development/wazuh/5.x/secondary/installation-assistant/${{ env.WAZUH_IMAGE_VERSION }}/wazuh-certs-tool.sh --expires-in 3600 --region us-west-1)
        curl -sL "$wazuh_certs_tool_url" -o ./wazuh-certs-tool.sh
        cat > config.yml <<EOF
        nodes:
          # Wazuh indexer server nodes
          indexer:
            - name: wazuh.indexer
              ip: wazuh.indexer

          # Wazuh server nodes
          # Use node_type only with more than one Wazuh manager
          server:
            - name: wazuh.manager
              ip: wazuh.manager

          # Wazuh dashboard node
          dashboard:
            - name: wazuh.dashboard
              ip: wazuh.dashboard
        EOF
        cat config.yml
        bash ./wazuh-certs-tool.sh -A
        sudo sysctl -w vm.max_map_count=262144
      working-directory: ./single-node

    - name: Edit single node docker-compose file
      shell: bash
      env:
        WAZUH_REGISTRY: ${{ env.WAZUH_REGISTRY }}
      run: |
        TARGET_FILE="single-node/docker-compose.yml"
        if [ -f "$TARGET_FILE" ]; then
          echo "Updating registry in $TARGET_FILE to: ${{ env.WAZUH_REGISTRY }}"
          sed -i "s|wazuh/wazuh-|${{ env.WAZUH_REGISTRY }}/wazuh/wazuh-|g" "$TARGET_FILE"
        else
          echo "File $TARGET_FILE not found"
          exit 1
        fi

    - name: Start single node stack
      run: docker compose up -d
      working-directory: ./single-node

    - name: Check Wazuh indexer start
      run: |
       for i in {1..20}; do
        echo "Checking Wazuh indexer health (Attempt $i/20)"
         RESPONSE=$(curl -XGET "https://127.0.0.1:9200/_cluster/health?pretty" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s --retry 2 || true)
         INDEXER_CONTAINERS=$(docker ps --format '{{.Names}}' | grep "indexer")
         if echo "$RESPONSE" | grep -qE "green|yellow"; then
           echo "Cluster Online"
           echo "$RESPONSE"
           exit 0
         fi
         echo "Waiting for cluster to be online"
         for CONTAINER_NAME in $INDEXER_CONTAINERS; do
           echo ""
           echo "========================================================="
           echo "Container logs for $CONTAINER_NAME"
           echo "========================================================="
           docker logs --tail 30 "$CONTAINER_NAME"
           echo "---------------------------------------------------------"
         done
         [ $i -lt 20 ] && sleep 60
       done
       status_index="`curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | wc -l`"
       status_index_green="`curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "green|yellow" | wc -l`"
       if [[ $status_index_green -eq $status_index ]]; then
        curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
       else
        curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
        exit 1
       fi


    - name: Check Wazuh indexer nodes
      run: |
       nodes="`curl -XGET "https://127.0.0.1:9200/_cat/nodes" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "indexer" | wc -l`"
       if [[ $nodes -eq 1 ]]; then
        echo "Wazuh indexer nodes: ${nodes}"
       else
        echo "Wazuh indexer nodes: ${nodes}"
       fi

    - name: Docker logs
      run: |
        echo "===== Wazuh Manager Logs ====="
        docker compose logs wazuh.manager
        echo "===== Wazuh Indexer Logs ====="
        docker compose logs wazuh.indexer
        echo "===== Wazuh Dashboard Logs ====="
        docker compose logs wazuh.dashboard
      working-directory: ./single-node


    - name: Check documents into wazuh-states index
      run: |
        for i in {1..20}; do
          echo "Checking documents in wazuh-states (Attempt $i/20)..."
          RESPONSE=$(curl -XGET "https://127.0.0.1:9200/wazuh-states*/_count" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s || echo "{}")
          DOCS=$(echo "$RESPONSE" | jq -r '.count // 0')
          if [[ "$DOCS" -gt 0 ]]; then
            echo "wazuh-states index has documents: ${DOCS}"
            exit 0
          fi

          INDEXER_CONTAINERS=$(docker ps --format '{{.Names}}')
          for CONTAINER_NAME in $INDEXER_CONTAINERS; do
            echo ""
            echo "========================================================="
            echo "Container logs for $CONTAINER_NAME"
            echo "========================================================="
            docker logs --tail 30 "$CONTAINER_NAME"
            echo "---------------------------------------------------------"
          done
          echo "The index is empty or does not exist yet (Count: $DOCS). Waiting 60s"
          [ $i -lt 20 ] && sleep 60
        done
        echo "Error: No documents found in wazuh-states after 20 attempts."
        echo "Last response: $RESPONSE"
        exit 1

    - name: Check Wazuh templates
      run: |
       qty_templates="`curl -XGET "https://127.0.0.1:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -P "wazuh|wazuh-agent|wazuh-statistics" | wc -l`"
       templates="`curl -XGET "https://127.0.0.1:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -P "wazuh|wazuh-agent|wazuh-statistics"`"
       if [[ $qty_templates -gt 3 ]]; then
        echo "wazuh templates:"
        echo "${templates}"
       else
        echo "wazuh templates:"
        echo "${templates}"
        exit 1
       fi

    - name: Check Wazuh manager start
      run: | 
        for NODE in "${{ env.MANAGER_NODES }}"; do
          for i in {1..20}; do
            TOKEN=$(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://127.0.0.1:55000/security/user/authenticate?raw=true")
            services="`curl -k -s -X GET "https://127.0.0.1:55000/cluster/$NODE/status?pretty=true" -H  "Authorization: Bearer ${TOKEN}" | jq -r .data.affected_items | grep running | wc -l`"
            if [[ $services -gt 9 ]]; then
              echo "Wazuh Manager $NODE Services: ${services}"
              echo "OK"
            else
              curl -k -X GET "https://127.0.0.1:55000/cluster/$NODE/status?pretty=true" -H  "Authorization: Bearer ${TOKEN}" | jq -r .data.affected_items
              echo "Wazuh Manager $NODE Services: ${services}. Retrying in 30s"
              [ $i -lt 20 ] && sleep 30
            fi
          done
        done
        
    - name: Check Wazuh dashboard service URL
      run: |
        for i in {1..20}; do
          echo "Checking Wazuh dashboard (Attempt $i/20)"
          STATUS=$(curl -k -s -o /dev/null -w "%{http_code}" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} "https://127.0.0.1:443/app/status")
          echo "Current status: $STATUS"
          if [[ "$STATUS" == "200" ]]; then
            echo "Wazuh dashboard is UP"
            exit 0
          elif [[ "$STATUS" == "429" || "$STATUS" == "503" ]]; then
            echo "Dashboard is busy or initializing (Status $STATUS). Retrying in 30s"
          else
            echo "Unexpected status $STATUS. Retrying in 30s"
          fi
          sleep 30
        done
        echo "Error: Dashboard did not reach 200 status in time."
        exit 1

    - name: Modify Docker endpoint into Wazuh agent docker-compose.yml file
      run: sed -i "s/<WAZUH_MANAGER_IP>/$(ip addr show docker0 | grep 'inet ' | awk '{print $2}' | cut -d'/' -f1)/g" wazuh-agent/docker-compose.yml

    - name: Edit Wazuh agent docker-compose file
      shell: bash
      env:
        WAZUH_REGISTRY: ${{ env.WAZUH_REGISTRY }}
      run: |
        TARGET_FILE="wazuh-agent/docker-compose.yml"
        if [ -f "$TARGET_FILE" ]; then
          echo "Updating registry in $TARGET_FILE to: ${{ env.WAZUH_REGISTRY }}"
          sed -i "s|wazuh/wazuh-|${{ env.WAZUH_REGISTRY }}/wazuh/wazuh-|g" "$TARGET_FILE"
        else
          echo "File $TARGET_FILE not found"
          exit 1
        fi

    - name: Start Wazuh agent
      run: docker compose up -d
      working-directory: ./wazuh-agent

    - name: Check Wazuh agent enrollment
      run: |
        sleep 20
        curl -k -s -X GET "https://localhost:55000/agents?pretty=true" -H  "Authorization: Bearer ${{env.TOKEN}}"
      env:
        TOKEN: $(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://127.0.0.1:55000/security/user/authenticate?raw=true")

    - name: Check errors in ossec.log for Wazuh manager
      run: ./.github/single-node-log-check.sh

  check-multi-node:
    name: Check multi node on ${{ matrix.os }}
    runs-on: ${{ matrix.os }} 
    strategy:
      matrix:
        os: [ubuntu-22.04, ubuntu-22.04-arm]
      fail-fast: false
    needs: [prepare-variables, Execute-Goss-tests, build-images]
    env:
      WAZUH_IMAGE_VERSION: ${{ needs.prepare-variables.outputs.WAZUH_IMAGE_VERSION }}
      WAZUH_MINOR_VERSION: ${{ needs.prepare-variables.outputs.WAZUH_MINOR_VERSION }}
      WAZUH_REGISTRY: ${{ needs.prepare-variables.outputs.WAZUH_REGISTRY }} 
      INDEXER_USERNAME: admin
      INDEXER_PASSWORD: admin
      API_USERNAME: wazuh-wui
      API_PASSWORD: MyS3cr37P450r.*-
      MANAGER_NODES: "master,worker01"
    steps:

    - name: Check out code
      uses: actions/checkout@v4

    - name: free disk space
      uses: ./.github/free-disk-space

    - name: Configure aws credentials
      uses: aws-actions/configure-aws-credentials@v4
      with:
        role-to-assume: ${{ secrets.AWS_IAM_DOCKER_ROLE }}
        aws-region: "${{ secrets.AWS_REGION }}"

    - name: Log in to Amazon ECR
      uses: aws-actions/amazon-ecr-login@v2

    - name: Create multi node certficates
      run: |
        wazuh_certs_tool_url=$(aws s3 presign s3://${{ vars.AWS_S3_BUCKET_DEV }}/development/wazuh/5.x/secondary/installation-assistant/${{ env.WAZUH_IMAGE_VERSION }}/wazuh-certs-tool.sh --expires-in 3600 --region us-west-1)
        curl -sL "$wazuh_certs_tool_url" -o ./wazuh-certs-tool.sh
        cat > config.yml <<EOF
        nodes:
          # Wazuh indexer server nodes
          indexer:
            - name: wazuh1.indexer
              ip: wazuh1.indexer
            - name: wazuh2.indexer
              ip: wazuh2.indexer
            - name: wazuh3.indexer
              ip: wazuh3.indexer

          # Wazuh server nodes
          # Use node_type only with more than one Wazuh manager
          server:
            - name: wazuh.master
              ip: wazuh.master
              node_type: master
            - name: wazuh.worker
              ip: wazuh.worker
              node_type: worker

          # Wazuh dashboard node
          dashboard:
            - name: wazuh.dashboard
              ip: wazuh.dashboard
        EOF
        cat config.yml
        bash ./wazuh-certs-tool.sh -A
        sudo sysctl -w vm.max_map_count=262144
      working-directory: ./multi-node

    - name: Edit multi node docker-compose file
      shell: bash
      run: |
        TARGET_FILE="multi-node/docker-compose.yml"
        if [ -f "$TARGET_FILE" ]; then
          echo "Updating registry in $TARGET_FILE to: ${{ env.WAZUH_REGISTRY }}"
          sed -i "s|wazuh/wazuh-|${{ env.WAZUH_REGISTRY }}/wazuh/wazuh-|g" "$TARGET_FILE"
        else
          echo "File $TARGET_FILE not found"
          exit 1
        fi

    - name: Start multi node stack
      run: docker compose up -d
      working-directory: ./multi-node

    - name: Check Wazuh indexer start
      run: |
       for i in {1..20}; do
        echo "Checking Wazuh indexer health (Attempt $i/20)"
         RESPONSE=$(curl -XGET "https://127.0.0.1:9200/_cluster/health?pretty" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s --retry 2 || true)
         INDEXER_CONTAINERS=$(docker ps --format '{{.Names}}' | grep "indexer")
         if echo "$RESPONSE" | grep -qE "green|yellow"; then
           echo "Cluster Online"
           echo "$RESPONSE"
           exit 0
         fi
         echo "Waiting for cluster to be online"
         for CONTAINER_NAME in $INDEXER_CONTAINERS; do
           echo ""
           echo "========================================================="
           echo "Container logs for $CONTAINER_NAME"
           echo "========================================================="
           docker logs --tail 30 "$CONTAINER_NAME"
           echo "---------------------------------------------------------"
         done
         [ $i -lt 20 ] && sleep 60
       done
       status_index="`curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | wc -l`"
       status_index_green="`curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "green" | wc -l`"
       if [[ $status_index_green -eq $status_index ]]; then
        curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
       else
        curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
        exit 1
       fi

    - name: Docker logs
      run: |
        echo "===== Wazuh Manager Logs ====="
        docker compose logs wazuh.master
        docker compose logs wazuh.worker
        echo "===== Wazuh Indexer Logs ====="
        docker compose logs wazuh1.indexer
        docker compose logs wazuh2.indexer
        docker compose logs wazuh3.indexer
        echo "===== Wazuh Dashboard Logs ====="
        docker compose logs wazuh.dashboard
      working-directory: ./multi-node

    - name: Check Wazuh indexer nodes
      run: |
       nodes="`curl -XGET "https://127.0.0.1:9200/_cat/nodes" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "indexer" | wc -l`"
       if [[ $nodes -eq 3 ]]; then
        echo "Wazuh indexer nodes: ${nodes}"
       else
        echo "Wazuh indexer nodes: ${nodes}"
       fi

    - name: Check documents into wazuh-states index
      run: |
        for i in {1..20}; do
          echo "Checking documents in wazuh-states (Attempt $i/20)..."
          RESPONSE=$(curl -XGET "https://127.0.0.1:9200/wazuh-states*/_count" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s || echo "{}")
          DOCS=$(echo "$RESPONSE" | jq -r '.count // 0')
          if [[ "$DOCS" -gt 0 ]]; then
            echo "wazuh-states index has documents: ${DOCS}"
            exit 0
          fi
          INDEXER_CONTAINERS=$(docker ps --format '{{.Names}}')
          for CONTAINER_NAME in $INDEXER_CONTAINERS; do
            echo ""
            echo "========================================================="
            echo "Container logs for $CONTAINER_NAME"
            echo "========================================================="
            docker logs --tail 30 "$CONTAINER_NAME"
            echo "---------------------------------------------------------"
          done
          echo "The index is empty or does not exist yet (Count: $DOCS). Waiting 60s"
          [ $i -lt 20 ] && sleep 60
        done
        echo "Error: No documents found in wazuh-states after 20 attempts."
        echo "Last response: $RESPONSE"
        exit 1

    - name: Check Wazuh templates
      run: |
       qty_templates="`curl -XGET "https://127.0.0.1:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep "wazuh" | wc -l`"
       templates="`curl -XGET "https://127.0.0.1:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep "wazuh"`"
       if [[ $qty_templates -gt 3 ]]; then
        echo "wazuh templates:"
        echo "${templates}"
       else
        echo "wazuh templates:"
        echo "${templates}"
        exit 1
       fi

    - name: Check Wazuh manager start
      run: | 
        IFS=',' read -r -a NODES <<< "${{ env.MANAGER_NODES }}"
        for NODE in "${NODES[@]}"; do
          for i in {1..20}; do
            TOKEN=$(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://127.0.0.1:55000/security/user/authenticate?raw=true")
            services="`curl -k -s -X GET "https://127.0.0.1:55000/cluster/$NODE/status?pretty=true" -H  "Authorization: Bearer ${TOKEN}" | jq -r .data.affected_items | grep running | wc -l`"
            if [[ $services -gt 9 ]]; then
              echo "Wazuh Manager $NODE Services: ${services}"
              echo "OK"
              break
            else
              curl -k -X GET "https://127.0.0.1:55000/cluster/$NODE/status?pretty=true" -H  "Authorization: Bearer ${TOKEN}" | jq -r .data.affected_items
              echo "Wazuh Manager $NODE Services: ${services}. Retrying in 30s"
              [ $i -lt 20 ] && sleep 30
            fi
          done
        done

    - name: Check Wazuh dashboard service URL
      run: |
        for i in {1..20}; do
          echo "Checking Wazuh dashboard (Attempt $i/20)"
          STATUS=$(curl -k -s -o /dev/null -w "%{http_code}" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} "https://127.0.0.1:443/app/status")
          echo "Current status: $STATUS"
          if [[ "$STATUS" == "200" ]]; then
            echo "Wazuh dashboard is UP"
            exit 0
          elif [[ "$STATUS" == "429" || "$STATUS" == "503" ]]; then
            echo "Dashboard is busy or initializing (Status $STATUS). Retrying in 30s"
          else
            echo "Unexpected status $STATUS. Retrying in 30s"
          fi
          sleep 30
        done
        echo "Error: Dashboard did not reach 200 status in time."
        exit 1

    - name: Modify Docker endpoint into Wazuh agent docker-compose.yml file
      run: sed -i "s/<WAZUH_MANAGER_IP>/$(ip addr show docker0 | grep 'inet ' | awk '{print $2}' | cut -d'/' -f1)/g" wazuh-agent/docker-compose.yml

    - name: Edit Wazuh agent docker-compose file
      shell: bash
      env:
        WAZUH_REGISTRY: ${{ env.WAZUH_REGISTRY }}
      run: |
        TARGET_FILE="wazuh-agent/docker-compose.yml"
        if [ -f "$TARGET_FILE" ]; then
          echo "Updating registry in $TARGET_FILE to: ${{ env.WAZUH_REGISTRY }}"
          sed -i "s|wazuh/wazuh-|${{ env.WAZUH_REGISTRY }}/wazuh/wazuh-|g" "$TARGET_FILE"
        else
          echo "File $TARGET_FILE not found"
          exit 1
        fi

    - name: Start Wazuh agent
      run: docker compose -f wazuh-agent/docker-compose.yml up -d

    - name: Check Wazuh agent enrollment
      run: |
        sleep 20
        curl -k -s -X GET "https://localhost:55000/agents?pretty=true" -H  "Authorization: Bearer ${{env.TOKEN}}"
      env:
        TOKEN: $(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://127.0.0.1:55000/security/user/authenticate?raw=true")

    - name: Check errors in ossec.log for Wazuh manager
      run: ./.github/multi-node-log-check.sh