minimal prebuilt #29
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Guardian CI | |
| on: | |
| workflow_dispatch: | |
| description: 'Manual run' | |
| push: | |
| branches-ignore: | |
| - 'dependabot/**' | |
| jobs: | |
| buildAndTest: | |
| name: Build and Test (Manual - Main) | |
| runs-on: [self-hosted, Linux, medium, ephemeral] | |
| strategy: | |
| matrix: | |
| node-version: [ 20.10.0 ] | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout Code | |
| uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 | |
| - name: Use Node.js ${{ matrix.node-version }} | |
| uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| - name: Setup Yarn | |
| uses: Borales/actions-yarn@3766bb1335b98fb13c60eaf358fe20811b730a88 # v5.0.0 | |
| with: | |
| cmd: install | |
| - name: Install dependencies | |
| run: yarn install | |
| - name: Build | |
| run: | | |
| yarn | |
| pushd interfaces | |
| yarn run build | |
| popd | |
| pushd common | |
| yarn run build | |
| popd | |
| pushd logger-service | |
| yarn run build | |
| popd | |
| pushd notification-service | |
| yarn run build | |
| popd | |
| pushd frontend | |
| npm install | |
| npm run build | |
| npm run build:prod | |
| npm run build:demo | |
| popd | |
| pushd auth-service | |
| yarn run build | |
| popd | |
| pushd policy-service | |
| yarn run build | |
| popd | |
| pushd guardian-service | |
| yarn run build | |
| popd | |
| pushd worker-service | |
| yarn run build | |
| popd | |
| pushd api-gateway | |
| yarn run build | |
| popd | |
| env: | |
| CI: true | |
| NODE_OPTIONS: --openssl-legacy-provider | |
| - name: Detect secrets | |
| run: | | |
| yarn run detect-secrets | |
| env: | |
| CI: true | |
| NODE_OPTIONS: --openssl-legacy-provider | |
| - name: Lint | |
| run: | | |
| pushd interfaces | |
| npm run lint | |
| popd | |
| pushd common | |
| npm run lint | |
| popd | |
| pushd logger-service | |
| npm run lint | |
| popd | |
| pushd notification-service | |
| npm run lint | |
| popd | |
| pushd auth-service | |
| npm run lint | |
| popd | |
| pushd policy-service | |
| npm run lint | |
| popd | |
| pushd guardian-service | |
| npm run lint | |
| popd | |
| pushd worker-service | |
| npm run lint | |
| popd | |
| pushd api-gateway | |
| npm run lint | |
| popd | |
| env: | |
| CI: true | |
| NODE_OPTIONS: --openssl-legacy-provider | |
| - name: Test | |
| run: | | |
| pushd common | |
| npm run test | |
| popd | |
| pushd policy-service | |
| npm run test | |
| popd | |
| pushd guardian-service | |
| npm run test | |
| popd | |
| env: | |
| CI: true | |
| NODE_OPTIONS: --openssl-legacy-provider | |
| OPERATOR_ID: ${{ secrets.CI_HEDERA_ACCOUNT }} | |
| OPERATOR_KEY: ${{ secrets.CI_HEDERA_PRIV_KEY }} | |
| - name: Publish Unit Test Results | |
| uses: EnricoMi/publish-unit-test-result-action@30eadd5010312f995f0d3b3cff7fe2984f69409e # v2.16.1 | |
| if: always() | |
| with: | |
| files: test_results/**/*.xml |