adding security scanning #164
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Time of Day | |
| on: | |
| push: | |
| branches: ['develop', 'main'] | |
| pull_request: | |
| branches: ['develop', 'main'] | |
| workflow_dispatch: | |
| jobs: | |
| format-and-setup: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ github.head_ref }} | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '20' | |
| cache: 'npm' | |
| - name: Run Format | |
| run: npm run format-check | |
| - name: Install Dependencies | |
| run: npm ci | |
| security-scanning: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Run npm audit | |
| run: npm audit | |
| - name: Run CodeQL Analysis | |
| uses: github/codeql-action/init@v2 | |
| with: | |
| languages: javascript | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v2 | |
| unit-test: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| needs: [format-and-setup] | |
| steps: | |
| - name: Checkout Code | |
| uses: actions/checkout@v4 | |
| - name: Install Dependencies | |
| run: npm ci | |
| - name: Run jest tests | |
| run: npm run test | |
| api-test: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| needs: [format-and-setup] | |
| steps: | |
| - name: Checkout Code | |
| uses: actions/checkout@v4 | |
| - name: Install Dependencies | |
| run: npm ci | |
| - name: Run api tests | |
| run: npm run api-test | |
| cypress-run-chrome: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| needs: [format-and-setup, unit-test, api-test] | |
| steps: | |
| - name: Checkout Code | |
| uses: actions/checkout@v4 | |
| - name: Install Dependencies | |
| run: npm ci | |
| - name: Run Cypress Tests against Chrome | |
| run: npm run cy:pipeline-run-chrome | |
| cypress-run-safari-webkit: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| needs: [format-and-setup, unit-test, api-test] | |
| steps: | |
| - name: Quick Sleep/Delay | |
| uses: GuillaumeFalourd/wait-sleep-action@v1 | |
| with: | |
| time: '2m' | |
| - name: Checkout Code | |
| uses: actions/checkout@v4 | |
| - name: Install Dependencies | |
| run: npm ci | |
| - name: Install webkit Dependencies | |
| run: npx playwright install-deps webkit | |
| - name: Run Cypress Tests against Safari-Webkit | |
| run: npm run cy:pipeline-run-webkit | |
| cypress-run-firefox: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| needs: [format-and-setup, unit-test, api-test] | |
| steps: | |
| - name: Quick Sleep/Delay | |
| uses: GuillaumeFalourd/wait-sleep-action@v1 | |
| with: | |
| time: '5m' | |
| - name: Checkout Code | |
| uses: actions/checkout@v4 | |
| - name: Install Dependencies | |
| run: npm ci | |
| - name: Run Cypress Tests against Firefox | |
| run: npm run cy:pipeline-run-firefox | |
| cypress-run-edge: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| needs: [format-and-setup, unit-test, api-test] | |
| steps: | |
| - name: Quick Sleep/Delay | |
| uses: GuillaumeFalourd/wait-sleep-action@v1 | |
| with: | |
| time: '7m' | |
| - name: Checkout Code | |
| uses: actions/checkout@v4 | |
| - name: Install Dependencies | |
| run: npm ci | |
| - name: Run Cypress Tests against Edge | |
| run: npm run cy:pipeline-run-edge | |
| cypress-run-electron: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| needs: [format-and-setup, unit-test, api-test] | |
| steps: | |
| - name: Quick Sleep/Delay | |
| uses: GuillaumeFalourd/wait-sleep-action@v1 | |
| with: | |
| time: '9m' | |
| - name: Checkout Code | |
| uses: actions/checkout@v4 | |
| - name: Install Dependencies | |
| run: npm ci | |
| - name: Run Cypress Tests against Electron | |
| run: npm run cy:pipeline-run-electron |