Test application [gh-readonly-queue/main/pr-996-a2c52372384478bae073ad90569161c3dbf24b7b] #484
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test application | |
| run-name: Test application [${{ github.head_ref || github.ref_name }}] | |
| on: | |
| merge_group: | |
| types: | |
| - checks_requested | |
| pull_request: | |
| branches: | |
| - main | |
| types: | |
| - opened | |
| - reopened | |
| - ready_for_review | |
| - synchronize | |
| permissions: | |
| id-token: write | |
| contents: read | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| run-checkov: | |
| name: Checkov | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Run checkov | |
| uses: govuk-one-login/github-actions/code-quality/run-checkov@9c5db98832a3d5f8d27e08eb0b3d89d186c8e163 | |
| with: | |
| skip-checks: | |
| CKV_SECRET_6 | |
| CKV_SECRET_9 | |
| check-shell-scripts: | |
| name: Shell scripts | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Run shell checks | |
| uses: govuk-one-login/github-actions/code-quality/check-shell-scripts@5dacba941def444d69f02843feaebed79b5fca51 # 11/04/2023 | |
| check-linting: | |
| name: Linting | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Check linting and formatting | |
| uses: govuk-one-login/github-actions/code-quality/check-linting@5dacba941def444d69f02843feaebed79b5fca51 # 11/04/2023 | |
| check-vulnerabilities: | |
| name: Vulnerabilities | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Run security audit | |
| uses: govuk-one-login/github-actions/code-quality/run-security-audit@5dacba941def444d69f02843feaebed79b5fca51 # 11/04/2023 | |
| with: | |
| workspaces: true | |
| sonarcloud: | |
| if: startsWith(github.head_ref, 'dependabot') != true | |
| name: SonarCloud | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Pull repository | |
| id: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Node dependencies | |
| run: npm install | |
| - name: Generate coverage report | |
| run: npm run test:cov | |
| - name: Fix Code Coverage Paths | |
| working-directory: ./coverage | |
| run: sed -i 's@'$GITHUB_WORKSPACE'@/github/workspace/@g' lcov.info | |
| - name: SonarCloud Scan | |
| uses: SonarSource/sonarcloud-github-action@master | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| run-unit-tests: | |
| name: Run unit tests | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Pull repository | |
| id: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Node dependencies | |
| run: npm install | |
| - name: Run unit tests | |
| id: run-tests | |
| env: | |
| REPORT: ${{ runner.temp }}/unit-tests.report | |
| run: npm run test -- --config infrastructure/ci/jest.config.ts |