This repository has been archived by the owner on Aug 14, 2024. It is now read-only.
security #30
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Tests | |
| on: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| jest: | |
| runs-on: ubuntu-latest | |
| permissions: read-all | |
| steps: | |
| - uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis | |
| - name: install dependencies | |
| working-directory: ./next/news-aggregation | |
| run: sudo npm install | |
| - name: install jest globally | |
| run: sudo npm install -g jest | |
| - name: run tests | |
| working-directory: ./next/news-aggregation | |
| run: npm run test | |
| playwright: | |
| runs-on: ubuntu-latest | |
| permissions: read-all | |
| steps: | |
| - uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis | |
| - name: install dependencies | |
| working-directory: ./next/news-aggregation | |
| run: sudo npm install | |
| - name: playright setup | |
| run: npx playwright install --with-deps | |
| - name: Tailscale | |
| uses: tailscale/github-action@v2 | |
| with: | |
| oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }} | |
| oauth-secret: ${{ secrets.TS_OAUTH_SECRET }} | |
| tags: tag:ci | |
| - name: Deploy to remote host | |
| uses: appleboy/ssh-action@master | |
| with: | |
| host: ${{ secrets.NEWNEWTITANIUM_IP }} | |
| username: ${{ secrets.NEWNEWTITANIUM_USER }} | |
| password: ${{ secrets.NEWNEWTITANIUM_PASS }} | |
| script: | | |
| cd /home/nial/TSI | |
| git pull | |
| npm install | |
| screen -S TSI -X quit | |
| screen -dmS TSI npm run dev | |
| - name: run tests | |
| working-directory: ./next/news-aggregation | |
| run: npx playwright test | |
| sonarqube: | |
| runs-on: ubuntu-latest | |
| permissions: read-all | |
| steps: | |
| - uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis | |
| - name: install dependencies | |
| working-directory: ./next/news-aggregation | |
| run: sudo npm install | |
| - uses: sonarsource/sonarqube-scan-action@master | |
| env: | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} | |
| # If you wish to fail your job when the Quality Gate is red, uncomment the | |
| # following lines. This would typically be used to fail a deployment. | |
| # - uses: sonarsource/sonarqube-quality-gate-action@master | |
| # timeout-minutes: 5 | |
| # env: | |
| # SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} |