feat: add permitted IPs for access key widget #9218
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: CI | |
on: | |
pull_request: | |
push: | |
branches: | |
- main | |
env: | |
NODE_VERSION: 18.10.0 | |
PNPM_VERSION: 8 | |
NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }} | |
jobs: | |
pr: | |
name: 👷 Build / Lint / Test | |
runs-on: ubuntu-latest | |
container: | |
# the container version should be the same as the version of the Playwright package | |
image: mcr.microsoft.com/playwright:v1.47.0-jammy | |
options: --user root | |
steps: | |
- name: Checkout code | |
uses: actions/checkout@v4 | |
with: | |
# ref: main | |
fetch-depth: 0 | |
- name: Setup pnpm | |
uses: pnpm/action-setup@v4 | |
with: | |
version: ${{ env.PNPM_VERSION }} | |
- name: Setup Node.js | |
uses: actions/setup-node@v4 | |
with: | |
node-version: ${{ env.NODE_VERSION }} | |
cache: 'pnpm' | |
# - name: Restore cached npm dependencies | |
# uses: actions/cache/restore@v4 | |
# with: | |
# path: | | |
# node_modules | |
# key: npm-dependencies-${{ hashFiles('pnpm-lock.yaml') }} | |
# Setup container | |
- name: Mark directory as safe | |
run: git config --system --add safe.directory /__w/descope-js/descope-js | |
- name: Install jq | |
run: apt-get update && apt-get install -y jq | |
- name: Set permission | |
run: chmod -R 777 /usr/local | |
- name: Install dependencies | |
run: pnpm install --frozen-lockfile --ignore-scripts | |
env: | |
CI: true | |
NODE_AUTH_TOKEN: ${{ secrets.CI_NPM_READ_ORG }} | |
# - name: Set NX cloud shas | |
# uses: nrwl/nx-set-shas@v4 | |
# - name: Install Playwright Browsers | |
# run: npx playwright install --with-deps | |
# - name: Cache npm dependencies | |
# uses: actions/cache/save@v4 | |
# with: | |
# path: | | |
# node_modules | |
# key: npm-dependencies-${{ hashFiles('pnpm-lock.yaml') }} | |
- name: Gitleaks | |
run: npm run leaks | |
shell: bash | |
- name: License validation | |
run: pnpm run licenseCheck | |
- name: Build | |
run: pnpm run build | |
- name: Lint | |
run: pnpm run lint | |
- name: Test | |
run: pnpm run test | |
- name: E2E | |
run: pnpm nx affected --target test:e2e | |
env: | |
HOME: /root | |
- name: Upload HTML report | |
if: always() | |
uses: actions/upload-artifact@v4 | |
with: | |
name: e2e-report | |
path: packages/**/playwright-report |