Merge pull request #4597 from alphagov/dependabot/bundler/govuk_publi… #4409

	name: CI

	on:
	workflow_dispatch: {}
	push:
	branches:
	- main
	paths-ignore:
	- "Jenkinsfile"
	- ".git**"
	pull_request:

	jobs:
	codeql-sast:
	name: CodeQL SAST scan
	uses: alphagov/govuk-infrastructure/.github/workflows/codeql-analysis.yml@main
	permissions:
	security-events: write

	dependency-review:
	name: Dependency Review scan
	uses: alphagov/govuk-infrastructure/.github/workflows/dependency-review.yml@main

	security-analysis:
	name: Security Analysis
	uses: alphagov/govuk-infrastructure/.github/workflows/brakeman.yml@main
	secrets: inherit
	permissions:
	contents: read
	security-events: write
	actions: read

	lint-scss:
	name: Lint SCSS
	uses: alphagov/govuk-infrastructure/.github/workflows/stylelint.yml@main
	with:
	files: "app/assets/stylesheets/"

	lint-javascript:
	name: Lint JavaScript
	uses: alphagov/govuk-infrastructure/.github/workflows/standardx.yml@main
	with:
	files: "'app/assets/javascripts/*/.js' 'spec/javascripts/*/.js'"

	lint-ruby:
	name: Lint Ruby
	uses: alphagov/govuk-infrastructure/.github/workflows/rubocop.yml@main

	lint-erb:
	name: Lint Views
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Setup Ruby
	uses: ruby/setup-ruby@v1
	with:
	bundler-cache: true

	- name: Run Erblint
	run: bundle exec erb_lint --lint-all


	test-javascript:
	name: Test JavaScript
	uses: ./.github/workflows/jasmine.yml

	test-ruby:
	name: Test Ruby
	uses: ./.github/workflows/rspec.yml

	pact-tests:
	name: Run Pact tests
	uses: ./.github/workflows/pact-verify.yml
	with:
	ref: ${{ github.ref }}

Provide feedback