ci.yml

name: ci

on:
  pull_request:
    types: [assigned, opened, synchronize, reopened, labeled]

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
  cancel-in-progress: true

# Declare default permissions as read only.
permissions: read-all

jobs:
  build-test:
    name: Run build & test
    runs-on: ubuntu-22.04
    steps:
    - name: Harden Runner
      uses: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0
      with:
        egress-policy: audit

    - name: Checkout
      uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v3.6.0

    - name: Prepare pre-requisites
      uses: ./.github/actions/prepare

    - name: Style
      run: |
        pnpm style

    - name: Build
      run: |
        pnpm nx-build-skip-cache

    - name: Test
      run: |
        pnpm nx-test-skip-cache