Turn on CSP #915
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Pull Request | |
| on: [push, pull_request] | |
| jobs: | |
| lint: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: pnpm/action-setup@v4 | |
| name: Install pnpm | |
| with: | |
| run_install: false | |
| - name: Install Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| cache: 'pnpm' | |
| - uses: actions/cache/restore@v4 | |
| with: | |
| path: .eslintcache | |
| key: ${{ runner.os }}-${{ hashFiles('**/lockfiles') }} | |
| - name: Install Deps | |
| run: PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 SENTRYCLI_SKIP_DOWNLOAD=1 pnpm install | |
| - name: Lint | |
| run: pnpm lint --quiet | |
| - uses: actions/cache/save@v4 | |
| if: always() | |
| with: | |
| path: .eslintcache | |
| key: ${{ runner.os }}-${{ hashFiles('**/lockfiles') }} | |
| build: | |
| timeout-minutes: 10 | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: pnpm/action-setup@v4 | |
| name: Install pnpm | |
| with: | |
| run_install: false | |
| - name: Install Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| cache: 'pnpm' | |
| - name: Install Deps | |
| run: PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 SENTRYCLI_SKIP_DOWNLOAD=1 pnpm install | |
| - name: Build | |
| run: pnpm build | |
| unit-tests: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: pnpm/action-setup@v4 | |
| name: Install pnpm | |
| with: | |
| run_install: false | |
| - name: Install Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| cache: 'pnpm' | |
| - name: Install Deps | |
| run: PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 SENTRYCLI_SKIP_DOWNLOAD=1 pnpm install | |
| - name: Test | |
| run: pnpm test:coverage | |
| - name: Upload Coverage | |
| uses: codecov/codecov-action@v4 | |
| env: | |
| CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |
| with: | |
| fail_ci_if_error: false | |
| files: ./coverage/lcov.info | |
| flags: unittests | |
| name: codecov-nectar | |
| verbose: true | |
| e2e-tests: | |
| timeout-minutes: 10 | |
| runs-on: ubuntu-latest | |
| env: | |
| CI: true | |
| BASE_CANONICAL_URL: ${{ vars.BASE_CANONICAL_URL }} | |
| API_HOST_CLIENT: ${{ vars.API_HOST_CLIENT }} | |
| API_HOST_SERVER: ${{ vars.API_HOST_SERVER }} | |
| COOKIE_SECRET: ${{ vars.COOKIE_SECRET }} | |
| PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1 | |
| SENTRYCLI_SKIP_DOWNLOAD: 1 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: pnpm/action-setup@v4 | |
| name: Install pnpm | |
| with: | |
| run_install: false | |
| - name: Install Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| cache: 'pnpm' | |
| - name: Install Deps | |
| run: PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 SENTRYCLI_SKIP_DOWNLOAD=1 pnpm install | |
| - name: Install Playwright Browsers | |
| run: pnpm exec playwright install --with-deps | |
| - name: setup environment variables | |
| run: | | |
| touch .env.local | |
| echo "CI=${{ env.CI }}" >> .env.local | |
| echo "BASE_CANONICAL_URL=${{ env.BASE_CANONICAL_URL }}" >> .env.local | |
| echo "API_HOST_CLIENT=${{ env.API_HOST_CLIENT }}" >> .env.local | |
| echo "API_HOST_SERVER=${{ env.API_HOST_SERVER }}" >> .env.local | |
| echo "COOKIE_SECRET=${{ env.COOKIE_SECRET }}" >> .env.local | |
| - name: Run integration tests | |
| run: pnpm integration | |
| - uses: actions/upload-artifact@v3 | |
| if: always() | |
| with: | |
| name: playwright-report | |
| path: playwright-report/ | |
| retention-days: 30 |