- Added support for push and workflow_dispatch events in pr-checks.yml to improve CI flexibility. - Implemented concurrency control in workflows to manage job execution more effectively. - Updated pnpm setup to include caching and specified version for consistency. - Removed redundant logging code from BFF application to streamline signal handling and improve readability. - Introduced CSRF_SECRET_KEY validation in environment configuration for production hardening. - Refactored logo component to use a fallback mechanism for image loading, enhancing user experience. - Added linting scripts to package.json for improved code quality checks.
58 lines
1.0 KiB
YAML
58 lines
1.0 KiB
YAML
name: Pull Request Checks
|
|
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches:
|
|
- main
|
|
- master
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: pr-checks-${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
quality-checks:
|
|
name: Code Quality & Security
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup pnpm
|
|
uses: pnpm/action-setup@v4
|
|
with:
|
|
version: 10.25.0
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: "22"
|
|
cache: "pnpm"
|
|
|
|
- name: Install dependencies
|
|
run: pnpm install --frozen-lockfile
|
|
|
|
- name: Check formatting
|
|
run: pnpm format:check
|
|
|
|
- name: Run linter
|
|
run: pnpm lint
|
|
|
|
- name: Run type check
|
|
run: pnpm type-check
|
|
|
|
- name: Run tests
|
|
run: pnpm test
|
|
|
|
- name: Build
|
|
run: pnpm build
|
|
|
|
- name: Verify domain dist is up-to-date
|
|
run: pnpm domain:check-dist
|