Add unified build scripts and update Quality Gate workflow for all packages

This commit is contained in:
2026-01-18 01:07:27 +03:00
parent b82f57a3ee
commit 994625b6b5
2 changed files with 126 additions and 17 deletions
+87 -17
View File
@@ -9,10 +9,10 @@ on:
jobs:
# ========================================
# BUILD, LINT & TEST (CRITICAL)
# WEB APP - BUILD, LINT & TEST
# ========================================
quality-gate:
name: Build, Lint & Test
web:
name: Web App
runs-on: ubuntu-latest
steps:
@@ -34,9 +34,9 @@ jobs:
uses: actions/cache@v4
with:
path: web/node_modules
key: ${{ runner.os }}-node-${{ hashFiles('web/package-lock.json') }}
key: ${{ runner.os }}-web-${{ hashFiles('web/package-lock.json') }}
restore-keys: |
${{ runner.os }}-node-
${{ runner.os }}-web-
- name: Install dependencies
working-directory: ./web
@@ -55,12 +55,11 @@ jobs:
run: npm run build
# ========================================
# SECURITY CHECKS (INFORMATIVE)
# MOBILE APP - LINT & TEST
# ========================================
security-audit:
name: Security Audit
mobile:
name: Mobile App
runs-on: ubuntu-latest
needs: quality-gate
steps:
- name: Checkout code
@@ -74,23 +73,94 @@ jobs:
- name: Cache npm dependencies
uses: actions/cache@v4
with:
path: web/node_modules
key: ${{ runner.os }}-node-${{ hashFiles('web/package-lock.json') }}
path: mobile/node_modules
key: ${{ runner.os }}-mobile-${{ hashFiles('mobile/package-lock.json') }}
restore-keys: |
${{ runner.os }}-node-
${{ runner.os }}-mobile-
- name: Install dependencies
working-directory: ./web
working-directory: ./mobile
run: npm install
- name: Run npm audit
- name: Run Linter
working-directory: ./mobile
run: npm run lint
- name: Run Tests
working-directory: ./mobile
run: npm run test
# ========================================
# SDK UI - BUILD & TEST
# ========================================
sdk-ui:
name: SDK UI
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: '20'
- name: Enable Corepack
run: corepack enable
- name: Cache yarn dependencies
uses: actions/cache@v4
with:
path: |
pezkuwi-sdk-ui/.yarn/cache
pezkuwi-sdk-ui/node_modules
key: ${{ runner.os }}-sdk-ui-${{ hashFiles('pezkuwi-sdk-ui/yarn.lock') }}
restore-keys: |
${{ runner.os }}-sdk-ui-
- name: Install dependencies
working-directory: ./pezkuwi-sdk-ui
run: yarn install
- name: Build Project
working-directory: ./pezkuwi-sdk-ui
run: yarn build
# ========================================
# SECURITY CHECKS (INFORMATIVE)
# ========================================
security-audit:
name: Security Audit
runs-on: ubuntu-latest
needs: [web, mobile, sdk-ui]
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: '20'
- name: Web - npm audit
working-directory: ./web
continue-on-error: true
run: npm audit --audit-level=high
run: |
npm install
npm audit --audit-level=high
- name: Mobile - npm audit
working-directory: ./mobile
continue-on-error: true
run: |
npm install
npm audit --audit-level=high
- name: TruffleHog Secret Scan
continue-on-error: true
uses: trufflesecurity/trufflehog@main
with:
path: ./
extra_args: --only-verified
extra_args: --only-verified