mirror of
https://github.com/pezkuwichain/pwap.git
synced 2026-04-22 02:07:55 +00:00
Add unified build scripts and update Quality Gate workflow for all packages
This commit is contained in:
@@ -9,10 +9,10 @@ on:
|
||||
|
||||
jobs:
|
||||
# ========================================
|
||||
# BUILD, LINT & TEST (CRITICAL)
|
||||
# WEB APP - BUILD, LINT & TEST
|
||||
# ========================================
|
||||
quality-gate:
|
||||
name: Build, Lint & Test
|
||||
web:
|
||||
name: Web App
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
@@ -34,9 +34,9 @@ jobs:
|
||||
uses: actions/cache@v4
|
||||
with:
|
||||
path: web/node_modules
|
||||
key: ${{ runner.os }}-node-${{ hashFiles('web/package-lock.json') }}
|
||||
key: ${{ runner.os }}-web-${{ hashFiles('web/package-lock.json') }}
|
||||
restore-keys: |
|
||||
${{ runner.os }}-node-
|
||||
${{ runner.os }}-web-
|
||||
|
||||
- name: Install dependencies
|
||||
working-directory: ./web
|
||||
@@ -55,12 +55,11 @@ jobs:
|
||||
run: npm run build
|
||||
|
||||
# ========================================
|
||||
# SECURITY CHECKS (INFORMATIVE)
|
||||
# MOBILE APP - LINT & TEST
|
||||
# ========================================
|
||||
security-audit:
|
||||
name: Security Audit
|
||||
mobile:
|
||||
name: Mobile App
|
||||
runs-on: ubuntu-latest
|
||||
needs: quality-gate
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
@@ -74,23 +73,94 @@ jobs:
|
||||
- name: Cache npm dependencies
|
||||
uses: actions/cache@v4
|
||||
with:
|
||||
path: web/node_modules
|
||||
key: ${{ runner.os }}-node-${{ hashFiles('web/package-lock.json') }}
|
||||
path: mobile/node_modules
|
||||
key: ${{ runner.os }}-mobile-${{ hashFiles('mobile/package-lock.json') }}
|
||||
restore-keys: |
|
||||
${{ runner.os }}-node-
|
||||
|
||||
${{ runner.os }}-mobile-
|
||||
|
||||
- name: Install dependencies
|
||||
working-directory: ./web
|
||||
working-directory: ./mobile
|
||||
run: npm install
|
||||
|
||||
- name: Run npm audit
|
||||
- name: Run Linter
|
||||
working-directory: ./mobile
|
||||
run: npm run lint
|
||||
|
||||
- name: Run Tests
|
||||
working-directory: ./mobile
|
||||
run: npm run test
|
||||
|
||||
# ========================================
|
||||
# SDK UI - BUILD & TEST
|
||||
# ========================================
|
||||
sdk-ui:
|
||||
name: SDK UI
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: '20'
|
||||
|
||||
- name: Enable Corepack
|
||||
run: corepack enable
|
||||
|
||||
- name: Cache yarn dependencies
|
||||
uses: actions/cache@v4
|
||||
with:
|
||||
path: |
|
||||
pezkuwi-sdk-ui/.yarn/cache
|
||||
pezkuwi-sdk-ui/node_modules
|
||||
key: ${{ runner.os }}-sdk-ui-${{ hashFiles('pezkuwi-sdk-ui/yarn.lock') }}
|
||||
restore-keys: |
|
||||
${{ runner.os }}-sdk-ui-
|
||||
|
||||
- name: Install dependencies
|
||||
working-directory: ./pezkuwi-sdk-ui
|
||||
run: yarn install
|
||||
|
||||
- name: Build Project
|
||||
working-directory: ./pezkuwi-sdk-ui
|
||||
run: yarn build
|
||||
|
||||
# ========================================
|
||||
# SECURITY CHECKS (INFORMATIVE)
|
||||
# ========================================
|
||||
security-audit:
|
||||
name: Security Audit
|
||||
runs-on: ubuntu-latest
|
||||
needs: [web, mobile, sdk-ui]
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: '20'
|
||||
|
||||
- name: Web - npm audit
|
||||
working-directory: ./web
|
||||
continue-on-error: true
|
||||
run: npm audit --audit-level=high
|
||||
run: |
|
||||
npm install
|
||||
npm audit --audit-level=high
|
||||
|
||||
- name: Mobile - npm audit
|
||||
working-directory: ./mobile
|
||||
continue-on-error: true
|
||||
run: |
|
||||
npm install
|
||||
npm audit --audit-level=high
|
||||
|
||||
- name: TruffleHog Secret Scan
|
||||
continue-on-error: true
|
||||
uses: trufflesecurity/trufflehog@main
|
||||
with:
|
||||
path: ./
|
||||
extra_args: --only-verified
|
||||
extra_args: --only-verified
|
||||
|
||||
Reference in New Issue
Block a user